{"metadata": {"vulnerability": "CVE-2026-80353", "count": 10, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-08-26T10:00:39.931Z", "date_only": false, "value": "2026-08-26T10:00:39.931Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-80353", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-20T13:42:05.844Z", "date_only": false, "value": "2026-10-20T13:42:05.844Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-80353", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-20T13:42:05.844Z", "date_only": false, "value": "2026-10-20T13:42:05.844Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-80353", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T13:42:05.844Z", "date_only": false, "value": "2026-10-20T13:42:05.844Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-80353", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T13:52:35.628Z", "date_only": false, "value": "2026-10-20T13:52:35.628001Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117473565417917388", "record": "CVE-2026-80353", "field": "creation_timestamp", "uuid": "313c302c-63ac-4cd7-b0e8-c6fbb6ea0f18", "content": "CVE-2026-80353 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. It did not address the same issue in the APR/Native connector.\nThis issue affects Apache Tomcat: from 9.0.47 through 9.0.122.\nUsers are recommended to upgrade to version 9.0.123, which fixes the issue.\nhttps://www.cve.org/CVERecord?id=CVE-2026-80353https://lists.apache.org/thread.html/tr0q87qwvs80p9hc53tkwpzvnx0ywftr#apache #ApacheSoftwareFoundation #ApacheTomcat#CVE_2026_80353#bot", "url": "https://infosec.exchange/users/cve/statuses/117473565417917388"}, {"timestamp": "2026-10-20T14:17:03Z", "date_only": false, "value": "2026-10-20T14:17:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WV4G-R8PF-3WMW", "record": "GHSA-WV4G-R8PF-3WMW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-20T14:17:03.283Z", "date_only": false, "value": "2026-10-20T14:17:03.283", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-80353", "record": "FKIE_CVE-2026-80353", "field": "published"}, {"timestamp": "2026-10-20T15:31:24Z", "date_only": false, "value": "2026-10-20T15:31:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WV4G-R8PF-3WMW", "record": "GHSA-WV4G-R8PF-3WMW", "field": "published"}, {"timestamp": "2026-10-20T15:31:24Z", "date_only": false, "value": "2026-10-20T15:31:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WV4G-R8PF-3WMW", "record": "GHSA-WV4G-R8PF-3WMW", "field": "modified"}, {"timestamp": "2026-10-20T19:35:38.940Z", "date_only": false, "value": "2026-10-20T19:35:38.940", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-80353", "record": "FKIE_CVE-2026-80353", "field": "lastModified"}]}