{"metadata": {"vulnerability": "CVE-2026-42596", "count": 23, "kinds": {"milestone": 4, "sighting": 6, "kev": 5, "other": 8}}, "data": [{"timestamp": "2026-04-29T00:31:15.724Z", "date_only": false, "value": "2026-04-29T00:31:15.724Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-42596", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-30T19:11:14Z", "date_only": false, "value": "2026-04-30T19:11:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-4vmc-gm8v-m35h", "record": "CVE-2026-42596", "field": "creation_timestamp", "uuid": "20cbb469-4370-434a-ace9-12dca26fae9c", "url": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-4vmc-gm8v-m35h"}, {"timestamp": "2026-05-07T01:15:19Z", "date_only": false, "value": "2026-05-07T01:15:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4VMC-GM8V-M35H", "record": "GHSA-4VMC-GM8V-M35H", "field": "published"}, {"timestamp": "2026-05-14T15:19:34.999Z", "date_only": false, "value": "2026-05-14T15:19:34.999Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-42596", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-14T15:19:34.999Z", "date_only": false, "value": "2026-05-14T15:19:34.999Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-42596", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-14T16:16:22Z", "date_only": false, "value": "2026-05-14T16:16:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4VMC-GM8V-M35H", "record": "GHSA-4VMC-GM8V-M35H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-14T16:16:22.893Z", "date_only": false, "value": "2026-05-14T16:16:22.893", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42596", "record": "FKIE_CVE-2026-42596", "field": "published"}, {"timestamp": "2026-05-14T17:14:35.327Z", "date_only": false, "value": "2026-05-14T17:14:35.327361Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mltcxjauzm2i", "record": "CVE-2026-42596", "field": "creation_timestamp", "uuid": "5d732a8b-32bf-4e5e-bd64-3938dda7a197", "content": "CVE-2026-42596 - Gotenberg: Unauthenticated SSRF via default deny-list bypass in downloadFrom and webhook\nCVE ID : CVE-2026-42596\n \n Published : May 14, 2026, 4:16 p.m. | 14\u00a0minutes ago\n \n Description : Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mltcxjauzm2i"}, {"timestamp": "2026-05-14T20:52:50Z", "date_only": false, "value": "2026-05-14T20:52:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4VMC-GM8V-M35H", "record": "GHSA-4VMC-GM8V-M35H", "field": "modified"}, {"timestamp": "2026-05-15T16:03:36.707Z", "date_only": false, "value": "2026-05-15T16:03:36.707460Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42596", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-15T16:03:36.707Z", "date_only": false, "value": "2026-05-15T16:03:36.707460Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42596", "record": "FKIE_CVE-2026-42596", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-15T16:04:05.815Z", "date_only": false, "value": "2026-05-15T16:04:05.815Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-42596", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-15T16:04:05.815Z", "date_only": false, "value": "2026-05-15T16:04:05.815Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42596", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-17T18:01:12.564Z", "date_only": false, "value": "2026-05-17T18:01:12.564719Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mm2wxmxcew2r", "record": "CVE-2026-42596", "field": "creation_timestamp", "uuid": "0c317585-8877-4f6e-8273-413b3ce3c8ea", "content": "\ud83d\udd34 CVE-2026-42596 - Critical (9.4)\n\nGotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, the default deny-list...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42596/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mm2wxmxcew2r"}, {"timestamp": "2026-05-18T13:07:29.480Z", "date_only": false, "value": "2026-05-18T13:07:29.480905Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mm4wypko3x2q", "record": "CVE-2026-42596", "field": "creation_timestamp", "uuid": "b6478d1c-21c5-4249-9b63-fbbab950c586", "content": "\ud83d\udccc CVE-2026-42596 - Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, the default deny-lists used by Gotenberg's downloadFrom feature and webhoo... https://www.cyberhub.blog/cves/CVE-2026-42596", "url": "https://bsky.app/profile/cyberhub.blog/post/3mm4wypko3x2q"}, {"timestamp": "2026-06-17T10:48:08.020Z", "date_only": false, "value": "2026-06-17T10:48:08.020", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42596", "record": "FKIE_CVE-2026-42596", "field": "lastModified"}, {"timestamp": "2026-08-30T12:00:04.329Z", "date_only": false, "value": "2026-08-30T12:00:04.329411Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-42596.yaml", "record": "CVE-2026-42596", "field": "creation_timestamp", "uuid": "129764f8-28a8-4249-ac6a-95ae55dca0c4", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-42596.yaml"}, {"timestamp": "2026-10-12T08:19:23Z", "date_only": false, "value": "2026-10-12T08:19:23+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-42596", "field": "timestamps.asserted_at", "uuid": "22b8adbf-a95d-4018-baa3-88eeec42c514", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T08:19:23Z", "date_only": false, "value": "2026-10-12T08:19:23+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-42596", "field": "timestamps.first_seen_at", "uuid": "22b8adbf-a95d-4018-baa3-88eeec42c514", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T08:19:23Z", "date_only": false, "value": "2026-10-12T08:19:23+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-42596", "field": "status.status_updated_at", "uuid": "22b8adbf-a95d-4018-baa3-88eeec42c514", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T08:19:23.011Z", "date_only": false, "value": "2026-10-12T08:19:23.011Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-42596", "field": "evidence.0.details.added_date", "uuid": "22b8adbf-a95d-4018-baa3-88eeec42c514", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-13T09:00:01Z", "date_only": false, "value": "2026-10-13T09:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-42596", "field": "timestamps.recorded_at", "uuid": "22b8adbf-a95d-4018-baa3-88eeec42c514", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-13T09:01:06.862Z", "date_only": false, "value": "2026-10-13T09:01:06.862104Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/22b8adbf-a95d-4018-baa3-88eeec42c514", "record": "CVE-2026-42596", "field": "creation_timestamp", "uuid": "84bbffaf-f3cb-43b1-a918-387f9c768784", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/22b8adbf-a95d-4018-baa3-88eeec42c514"}]}