{"metadata": {"vulnerability": "CVE-2026-14851", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-07-06T11:49:37.786Z", "date_only": false, "value": "2026-07-06T11:49:37.786Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-14851", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T08:03:00Z", "date_only": false, "value": "2026-10-14T08:03:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / INCIBE", "record": "CVE-2026-14851", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T08:23:26.615Z", "date_only": false, "value": "2026-10-14T08:23:26.615Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14851", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T08:23:26.615Z", "date_only": false, "value": "2026-10-14T08:23:26.615Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / INCIBE", "record": "CVE-2026-14851", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T09:00:27.470Z", "date_only": false, "value": "2026-10-14T09:00:27.470876Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117438442807812348", "record": "cve-2026-14851", "field": "creation_timestamp", "uuid": "b6d535f0-d504-47ff-9d37-3b69ace42b26", "content": "CVE-2026-14851 (CRITICAL, CVSS 9.2): Copart billing service leaks PII & financial data via unauthenticated PDF invoice endpoints. Some URLs are indexed by search engines. Restrict access & block public indexing now. https://radar.offseq.com/threat/cve-2026-14851-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-copart-coparts-ef462fbc1a47157a #OffSeq #CVE #infosec #databreach", "url": "https://infosec.exchange/users/offseq/statuses/117438442807812348"}, {"timestamp": "2026-10-14T09:00:29.581Z", "date_only": false, "value": "2026-10-14T09:00:29.581361Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxt6otqc4a2j", "record": "cve-2026-14851", "field": "creation_timestamp", "uuid": "59233a49-061b-4be8-9084-b6af0605f643", "content": "Copart\u2019s billing platform hit by CRITICAL vuln (CVE-2026-14851, CVSS 9.2): PII/financial data exposed via unauth endpoints & indexed URLs. Restrict endpoint access, block search indexing ASAP. https://radar.offseq.com/threat/cve-2026-14851-cwe-200-exposure-of-sensitive-information-to-an-unauthori...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxt6otqc4a2j"}, {"timestamp": "2026-10-14T09:17:22Z", "date_only": false, "value": "2026-10-14T09:17:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CVJ8-QJR2-GMP7", "record": "GHSA-CVJ8-QJR2-GMP7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T09:17:22.437Z", "date_only": false, "value": "2026-10-14T09:17:22.437", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14851", "record": "FKIE_CVE-2026-14851", "field": "published"}, {"timestamp": "2026-10-14T09:31:35Z", "date_only": false, "value": "2026-10-14T09:31:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CVJ8-QJR2-GMP7", "record": "GHSA-CVJ8-QJR2-GMP7", "field": "published"}, {"timestamp": "2026-10-14T09:31:35Z", "date_only": false, "value": "2026-10-14T09:31:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CVJ8-QJR2-GMP7", "record": "GHSA-CVJ8-QJR2-GMP7", "field": "modified"}, {"timestamp": "2026-10-14T09:40:04.358Z", "date_only": false, "value": "2026-10-14T09:40:04.358986Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtavmvnzy2h", "record": "CVE-2026-14851", "field": "creation_timestamp", "uuid": "b7b01fe1-f436-4652-b80d-278a8e16c445", "content": "CVE-2026-14851 - copart\u2019s online billing service\nThe invoicing web page used by Copart does not verify who can view PDF invoices, so anyone can retrieve files that contain names, addresses, payment details and tax\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#copart #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtavmvnzy2h"}, {"timestamp": "2026-10-14T10:06:15.596Z", "date_only": false, "value": "2026-10-14T10:06:15.596366Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2u2atpcx7sdvm", "record": "CVE-2026-14851", "field": "creation_timestamp", "uuid": "d5b5a2cd-6301-4eff-a373-aa86090e48c7", "content": "CVE-2026-14851 - Unauthorised disclosure of information on Copart\u2019s online billing service\nCVE ID : CVE-2026-14851\n \n Published : Oct. 14, 2026, 8:23 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : A vulnerability relating to the exposure of confidential information in the custo...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/2u2atpcx7sdvm"}, {"timestamp": "2026-10-14T10:07:27.869Z", "date_only": false, "value": "2026-10-14T10:07:27.869381Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtcgmpam22w", "record": "CVE-2026-14851", "field": "creation_timestamp", "uuid": "b8a40753-5a52-45b5-a9e1-6606b6fee90f", "content": "\ud83d\udea8 CVE-2026-14851 \u2014 CVSS 9.2 CRITICAL\n\nA vulnerability relating to the exposure of confidential information in the customer invoicing web applicat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-14851\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtcgmpam22w"}, {"timestamp": "2026-10-14T14:14:46.650Z", "date_only": false, "value": "2026-10-14T14:14:46.650420Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14851", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T14:14:46.650Z", "date_only": false, "value": "2026-10-14T14:14:46.650420Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14851", "record": "FKIE_CVE-2026-14851", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T14:14:57.687Z", "date_only": false, "value": "2026-10-14T14:14:57.687Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-14851", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:14:57.687Z", "date_only": false, "value": "2026-10-14T14:14:57.687Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14851", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T17:45:01.375Z", "date_only": false, "value": "2026-10-14T17:45:01.375111Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440505505719566", "record": "CVE-2026-14851", "field": "creation_timestamp", "uuid": "d00779f9-b4da-48bc-84ae-9c79f74be4c1", "content": "CVE-2026-14851 Unauthorised disclosure of information on Copart\u2019s online billing service A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data \u2013 including customer names, addresses, invoice numbers, payment details and tax information \u2013 to unauthorised individuals. The issue is caused by a lack of authorisation checks at the endpoint responsible for serving PDF invoice files. Furthermore, some URLs for invoicing documents appear to be publicly accessible via search engines, exposing paths to confidential files. Successful exploitation of this vulnerability could allow an attacker to access data to which they should not have access, as well as to predict identifiers in order to access even more confidential information.\nhttps://www.cve.org/CVERecord?id=CVE-2026-14851https://www.incibe.es/en/incibe-cert/notices/aviso/unauthorised-disclosure-information-coparts-online-billing-service#Copart #Copart\u2019sonlinebillingservice#CVE_2026_14851#bot", "url": "https://infosec.exchange/users/cve/statuses/117440505505719566"}, {"timestamp": "2026-10-15T16:33:47.027Z", "date_only": false, "value": "2026-10-15T16:33:47.027", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14851", "record": "FKIE_CVE-2026-14851", "field": "lastModified"}]}