{"metadata": {"vulnerability": "CVE-2026-63316", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-07-16T12:42:37.683Z", "date_only": false, "value": "2026-07-16T12:42:37.683Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-63316", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-63316", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T03:55:00Z", "date_only": false, "value": "2026-10-13T03:55:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cert.pl/en/posts/2026/10/CVE-2026-63316", "record": "CVE-2026-63316", "field": "creation_timestamp", "uuid": "752e6eec-0e2e-45c1-8584-1bb91306fad3", "url": "https://cert.pl/en/posts/2026/10/CVE-2026-63316"}, {"timestamp": "2026-10-13T11:05:09.403Z", "date_only": false, "value": "2026-10-13T11:05:09.403Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-63316", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T11:26:44.024Z", "date_only": false, "value": "2026-10-13T11:26:44.024156Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117433355705582066", "record": "CVE-2026-63316", "field": "creation_timestamp", "uuid": "5cbd8af7-123c-45fb-9183-86c2ac8e9c4d", "content": "CVE-2026-63316 SQL Injection in Payload CMS A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into \"in\" and \"not_in\" query paramethers allows an authenticated attacker to perform SQL Injection attacks.\nThis issue was fixed in version 3.90.0 and 4.0.0-canary.34.\nhttps://www.cve.org/CVERecord?id=CVE-2026-63316https://cert.pl/posts/2026/11/CVE-2026-63316https://github.com/payloadcms/payload/security/advisories/GHSA-pj7x-6wpf-pgvp#Payload #PayloadCMS#CVE_2026_63316#bot", "url": "https://infosec.exchange/users/cve/statuses/117433355705582066"}, {"timestamp": "2026-10-13T12:06:13.522Z", "date_only": false, "value": "2026-10-13T12:06:13.522020Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fjwodcpiok6fn", "record": "CVE-2026-63316", "field": "creation_timestamp", "uuid": "1e640d9e-ccdb-48a9-8a4f-192c89547591", "content": "CVE-2026-63316 - SQL Injection in Payload CMS\nCVE ID : CVE-2026-63316\n \n Published : 13. Oktober 2026 11:05 | 27\u00a0Minuten ago\n \n Description : A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into \"in\" and \"not_...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/fjwodcpiok6fn"}, {"timestamp": "2026-10-13T12:17:14Z", "date_only": false, "value": "2026-10-13T12:17:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-57GG-GH75-CFJG", "record": "GHSA-57GG-GH75-CFJG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T12:17:14.473Z", "date_only": false, "value": "2026-10-13T12:17:14.473", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63316", "record": "FKIE_CVE-2026-63316", "field": "published"}, {"timestamp": "2026-10-13T12:32:58Z", "date_only": false, "value": "2026-10-13T12:32:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-57GG-GH75-CFJG", "record": "GHSA-57GG-GH75-CFJG", "field": "published"}, {"timestamp": "2026-10-13T12:36:21.079Z", "date_only": false, "value": "2026-10-13T12:36:21.079Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-63316", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T15:32:11Z", "date_only": false, "value": "2026-10-13T15:32:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-57GG-GH75-CFJG", "record": "GHSA-57GG-GH75-CFJG", "field": "modified"}, {"timestamp": "2026-10-16T17:00:08.217Z", "date_only": false, "value": "2026-10-16T17:00:08.217076Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63316", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T17:00:08.217Z", "date_only": false, "value": "2026-10-16T17:00:08.217076Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63316", "record": "FKIE_CVE-2026-63316", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T17:17:14.851Z", "date_only": false, "value": "2026-10-16T17:17:14.851Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-63316", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T17:17:14.851Z", "date_only": false, "value": "2026-10-16T17:17:14.851Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63316", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T20:04:29.760Z", "date_only": false, "value": "2026-10-16T20:04:29.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63316", "record": "FKIE_CVE-2026-63316", "field": "lastModified"}]}