diff --git a/data/2025/10xxx/CVE-2025-10698.json b/data/2025/10xxx/CVE-2025-10698.json new file mode 100644 index 0000000000..a65ed02bd7 --- /dev/null +++ b/data/2025/10xxx/CVE-2025-10698.json @@ -0,0 +1,142 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2025-10698", + "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", + "state": "PUBLISHED", + "assignerShortName": "OpenText", + "dateReserved": "2025-09-18T17:13:07.250Z", + "datePublished": "2026-11-12T16:29:44.443Z", + "dateUpdated": "2026-11-12T16:29:44.443Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", + "shortName": "OpenText", + "dateUpdated": "2026-11-12T16:29:44.443Z" + }, + "title": "Improper File Permissions on Private Key Files in Docker Deployments", + "datePublic": "2025-09-01T00:00:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-276", + "description": "CWE-276 Incorrect default permissions", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-1269", + "description": "CWE-1269 Product released in Non-Release configuration", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-37", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-37 Retrieve Embedded Sensitive Data" + } + ] + } + ], + "affected": [ + { + "vendor": "OpenText", + "product": "Identity Console", + "platforms": [ + "Windows", + "Linux", + "64 bit" + ], + "versions": [ + { + "status": "affected", + "version": "1.8", + "lessThan": "25.2", + "changes": [ + { + "at": "25.2", + "status": "unaffected" + } + ], + "versionType": "rpm, exe" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect default permissions and Product released in Non-Release configuration vulnerability in OpenText Identity Console on Windows, Linux, and 64 bit allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Identity Console: from 1.8 through 25.2.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Incorrect default permissions and Product released in Non-Release configuration vulnerability in OpenText Identity Console on Windows, Linux, and 64 bit allows Retrieve Embedded Sensitive Data.

This issue affects Identity Console: from 1.8 through 25.2.

" + } + ] + } + ], + "references": [ + { + "url": "https://docs.microfocus.com/doc/29/25.4/securityandsoftwarefixes" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "Safety": "NEGLIGIBLE", + "Automatable": "NO", + "Recovery": "USER", + "valueDensity": "CONCENTRATED", + "vulnerabilityResponseEffort": "LOW", + "providerUrgency": "AMBER", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/S:N/AU:N/R:U/V:C/RE:L/U:Amber" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/106xxx/CVE-2026-106154.json b/data/2026/106xxx/CVE-2026-106154.json new file mode 100644 index 0000000000..86323dfd44 --- /dev/null +++ b/data/2026/106xxx/CVE-2026-106154.json @@ -0,0 +1,113 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-106154", + "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "state": "PUBLISHED", + "assignerShortName": "ProgressSoftware", + "dateReserved": "2026-10-06T15:51:11.738Z", + "datePublished": "2026-11-12T17:13:26.499Z", + "dateUpdated": "2026-11-12T17:13:26.499Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "shortName": "ProgressSoftware", + "dateUpdated": "2026-11-12T17:13:26.499Z" + }, + "title": "Uncontrolled Recursion in Telerik UI for ASP.NET Core FilterParser", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-674", + "description": "CWE-674 Uncontrolled Recursion", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-230", + "descriptions": [ + { + "lang": "en", + "value": "Serialized Data Parameter Blowup" + } + ] + } + ], + "affected": [ + { + "vendor": "Progress Software", + "product": "Telerik UI for ASP.NET Core", + "versions": [ + { + "status": "affected", + "version": "2015.1.318", + "lessThanOrEqual": "2026.3.1015", + "versionType": "custom" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.1015`, the server-side FilterParser processes nested expressions in untrusted filter parameters through recursive parsing without a recursion-depth limit, while FilterLexer does not enforce an input-length limit. An unauthenticated remote attacker can exploit this if the application exposes an endpoint using DataSourceRequest model binding that is reachable without authentication. Deeply nested filters can trigger parsing errors during model binding or cause `StackOverflowException`. This issue is fixed in version `2026.4.1111`.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.1015`, the server-side FilterParser processes nested expressions in untrusted filter parameters through recursive parsing without a recursion-depth limit, while FilterLexer does not enforce an input-length limit. An unauthenticated remote attacker can exploit this if the application exposes an endpoint using DataSourceRequest model binding that is reachable without authentication. Deeply nested filters can trigger parsing errors during model binding or cause `StackOverflowException`. This issue is fixed in version `2026.4.1111`.

" + } + ] + } + ], + "references": [ + { + "url": "https://www.telerik.com/aspnet-core-ui/documentation/knowledge-base/kb-security-uncontrolled-recursion-cve-2026-106154", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 8.6, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" + } + } + ], + "source": { + "discovery": "INTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108472.json b/data/2026/108xxx/CVE-2026-108472.json index 22e330635e..cc55b470f9 100644 --- a/data/2026/108xxx/CVE-2026-108472.json +++ b/data/2026/108xxx/CVE-2026-108472.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-09T22:24:14.527Z", "datePublished": "2026-11-11T18:38:17.370Z", - "dateUpdated": "2026-11-12T00:12:25.032Z" + "dateUpdated": "2026-11-12T16:52:56.950Z" }, "containers": { "cna": { @@ -48,6 +48,25 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 9.8 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "xfsprogs", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:6.4.0-8.el9_8", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:rhel_eus:9.8::appstream", + "cpe:/o:redhat:rhel_eus:9.8::baseos" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -120,6 +139,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:99662", + "name": "RHSA-2026:99662", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-108472", "tags": [ @@ -177,7 +204,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-11T18:38:17.370Z" + "dateUpdated": "2026-11-12T16:52:56.950Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112315.json b/data/2026/112xxx/CVE-2026-112315.json index 858c1caa0c..454c2ab9a6 100644 --- a/data/2026/112xxx/CVE-2026-112315.json +++ b/data/2026/112xxx/CVE-2026-112315.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:23:58.679Z", "datePublished": "2026-11-09T19:07:47.557Z", - "dateUpdated": "2026-11-12T12:56:51.910Z" + "dateUpdated": "2026-11-12T16:47:25.081Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "krb5", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.21.3-10.el10_2.2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +144,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99625", + "name": "RHSA-2026:99625", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-112315", "tags": [ @@ -183,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T12:56:51.910Z" + "dateUpdated": "2026-11-12T16:47:25.081Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112316.json b/data/2026/112xxx/CVE-2026-112316.json index c7edfc1411..2a5b3078af 100644 --- a/data/2026/112xxx/CVE-2026-112316.json +++ b/data/2026/112xxx/CVE-2026-112316.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:24:50.360Z", "datePublished": "2026-11-09T19:08:00.263Z", - "dateUpdated": "2026-11-12T12:56:53.760Z" + "dateUpdated": "2026-11-12T16:47:29.411Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "krb5", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.21.3-10.el10_2.2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +144,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99625", + "name": "RHSA-2026:99625", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-112316", "tags": [ @@ -183,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T12:56:53.760Z" + "dateUpdated": "2026-11-12T16:47:29.411Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112317.json b/data/2026/112xxx/CVE-2026-112317.json index 2306da0e60..dbf5faeaf3 100644 --- a/data/2026/112xxx/CVE-2026-112317.json +++ b/data/2026/112xxx/CVE-2026-112317.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:25:20.662Z", "datePublished": "2026-11-09T19:07:58.372Z", - "dateUpdated": "2026-11-12T12:56:55.968Z" + "dateUpdated": "2026-11-12T16:47:35.522Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "krb5", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.21.3-10.el10_2.2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +144,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99625", + "name": "RHSA-2026:99625", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-112317", "tags": [ @@ -183,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T12:56:55.968Z" + "dateUpdated": "2026-11-12T16:47:35.522Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112318.json b/data/2026/112xxx/CVE-2026-112318.json index 58b5b4dc7d..26dd273505 100644 --- a/data/2026/112xxx/CVE-2026-112318.json +++ b/data/2026/112xxx/CVE-2026-112318.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:25:59.007Z", "datePublished": "2026-11-09T19:08:02.661Z", - "dateUpdated": "2026-11-12T12:56:57.981Z" + "dateUpdated": "2026-11-12T16:47:39.479Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "krb5", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.21.3-10.el10_2.2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +144,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99625", + "name": "RHSA-2026:99625", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-112318", "tags": [ @@ -183,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T12:56:57.981Z" + "dateUpdated": "2026-11-12T16:47:39.479Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112319.json b/data/2026/112xxx/CVE-2026-112319.json index 6982d5eb07..b80b9696b2 100644 --- a/data/2026/112xxx/CVE-2026-112319.json +++ b/data/2026/112xxx/CVE-2026-112319.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:26:25.093Z", "datePublished": "2026-11-09T19:08:05.007Z", - "dateUpdated": "2026-11-12T12:57:02.764Z" + "dateUpdated": "2026-11-12T16:47:44.222Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "krb5", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.21.3-10.el10_2.2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +144,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99625", + "name": "RHSA-2026:99625", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-112319", "tags": [ @@ -183,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T12:57:02.764Z" + "dateUpdated": "2026-11-12T16:47:44.222Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112320.json b/data/2026/112xxx/CVE-2026-112320.json index 33a764b9aa..8d31e1060f 100644 --- a/data/2026/112xxx/CVE-2026-112320.json +++ b/data/2026/112xxx/CVE-2026-112320.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:26:51.377Z", "datePublished": "2026-11-09T19:08:07.434Z", - "dateUpdated": "2026-11-12T12:57:03.261Z" + "dateUpdated": "2026-11-12T16:47:49.479Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "krb5", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.21.3-10.el10_2.2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +144,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99625", + "name": "RHSA-2026:99625", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-112320", "tags": [ @@ -183,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T12:57:03.261Z" + "dateUpdated": "2026-11-12T16:47:49.479Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112321.json b/data/2026/112xxx/CVE-2026-112321.json index dfadbf2f84..e428d90bae 100644 --- a/data/2026/112xxx/CVE-2026-112321.json +++ b/data/2026/112xxx/CVE-2026-112321.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:27:17.372Z", "datePublished": "2026-11-09T19:08:10.347Z", - "dateUpdated": "2026-11-12T12:57:05.412Z" + "dateUpdated": "2026-11-12T16:47:53.597Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "krb5", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.21.3-10.el10_2.2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +144,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99625", + "name": "RHSA-2026:99625", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-112321", "tags": [ @@ -183,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T12:57:05.412Z" + "dateUpdated": "2026-11-12T16:47:53.597Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112322.json b/data/2026/112xxx/CVE-2026-112322.json index 301da9bc32..c4dbf8cb21 100644 --- a/data/2026/112xxx/CVE-2026-112322.json +++ b/data/2026/112xxx/CVE-2026-112322.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:27:47.648Z", "datePublished": "2026-11-09T18:43:23.841Z", - "dateUpdated": "2026-11-12T12:57:03.732Z" + "dateUpdated": "2026-11-12T16:47:57.396Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "krb5", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.21.3-10.el10_2.2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +144,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99625", + "name": "RHSA-2026:99625", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-112322", "tags": [ @@ -183,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T12:57:03.732Z" + "dateUpdated": "2026-11-12T16:47:57.396Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112323.json b/data/2026/112xxx/CVE-2026-112323.json index b6740c3081..2d0681d89e 100644 --- a/data/2026/112xxx/CVE-2026-112323.json +++ b/data/2026/112xxx/CVE-2026-112323.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:29:07.369Z", "datePublished": "2026-11-09T18:43:29.636Z", - "dateUpdated": "2026-11-12T12:57:08.404Z" + "dateUpdated": "2026-11-12T16:48:02.393Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "krb5", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.21.3-10.el10_2.2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +144,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99625", + "name": "RHSA-2026:99625", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-112323", "tags": [ @@ -183,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T12:57:08.404Z" + "dateUpdated": "2026-11-12T16:48:02.393Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/114xxx/CVE-2026-114031.json b/data/2026/114xxx/CVE-2026-114031.json index 4ee6f84f9d..db36976aaa 100644 --- a/data/2026/114xxx/CVE-2026-114031.json +++ b/data/2026/114xxx/CVE-2026-114031.json @@ -8,7 +8,7 @@ "assignerShortName": "Illumio", "dateReserved": "2026-10-20T21:11:53.061Z", "datePublished": "2026-11-09T21:31:15.467Z", - "dateUpdated": "2026-11-10T19:16:07.428Z" + "dateUpdated": "2026-11-12T17:11:30.616Z" }, "containers": { "cna": { @@ -225,6 +225,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:10:35.342224Z", + "id": "CVE-2026-114031", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:11:30.616Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114032.json b/data/2026/114xxx/CVE-2026-114032.json index 201ac24e44..8fbcbff8cc 100644 --- a/data/2026/114xxx/CVE-2026-114032.json +++ b/data/2026/114xxx/CVE-2026-114032.json @@ -8,7 +8,7 @@ "assignerShortName": "Illumio", "dateReserved": "2026-10-20T21:11:53.061Z", "datePublished": "2026-11-09T21:31:52.776Z", - "dateUpdated": "2026-11-09T21:35:32.985Z" + "dateUpdated": "2026-11-12T17:16:38.649Z" }, "containers": { "cna": { @@ -111,6 +111,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:14:02.415605Z", + "id": "CVE-2026-114032", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:16:38.649Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114594.json b/data/2026/114xxx/CVE-2026-114594.json index 1be08a448d..6d7cdb87c7 100644 --- a/data/2026/114xxx/CVE-2026-114594.json +++ b/data/2026/114xxx/CVE-2026-114594.json @@ -8,7 +8,7 @@ "assignerShortName": "SDC", "dateReserved": "2026-10-21T19:56:10.660Z", "datePublished": "2026-11-09T16:15:55.511Z", - "dateUpdated": "2026-11-09T16:15:55.511Z" + "dateUpdated": "2026-11-12T16:44:31.650Z" }, "containers": { "cna": { @@ -124,6 +124,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:43:46.843251Z", + "id": "CVE-2026-114594", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:44:31.650Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/115xxx/CVE-2026-115336.json b/data/2026/115xxx/CVE-2026-115336.json index dcebb20d40..62b082207a 100644 --- a/data/2026/115xxx/CVE-2026-115336.json +++ b/data/2026/115xxx/CVE-2026-115336.json @@ -8,7 +8,7 @@ "assignerShortName": "ProgressSoftware", "dateReserved": "2026-10-22T10:41:52.792Z", "datePublished": "2026-11-09T16:44:04.982Z", - "dateUpdated": "2026-11-09T16:44:04.982Z" + "dateUpdated": "2026-11-12T17:02:19.621Z" }, "containers": { "cna": { @@ -123,6 +123,40 @@ "x_generator": { "engine": "Vulnogram 0.2.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:01:46.220349Z", + "id": "CVE-2026-115336", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:02:19.621Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/115xxx/CVE-2026-115339.json b/data/2026/115xxx/CVE-2026-115339.json index 15d057cccd..ddd48bb064 100644 --- a/data/2026/115xxx/CVE-2026-115339.json +++ b/data/2026/115xxx/CVE-2026-115339.json @@ -8,7 +8,7 @@ "assignerShortName": "ProgressSoftware", "dateReserved": "2026-10-22T10:41:52.792Z", "datePublished": "2026-11-09T16:46:51.328Z", - "dateUpdated": "2026-11-09T16:46:51.328Z" + "dateUpdated": "2026-11-12T17:03:31.754Z" }, "containers": { "cna": { @@ -130,6 +130,40 @@ "x_generator": { "engine": "Vulnogram 0.2.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:02:35.221415Z", + "id": "CVE-2026-115339", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:03:31.754Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/115xxx/CVE-2026-115340.json b/data/2026/115xxx/CVE-2026-115340.json index e4d4553cb3..e07a2b40d0 100644 --- a/data/2026/115xxx/CVE-2026-115340.json +++ b/data/2026/115xxx/CVE-2026-115340.json @@ -8,7 +8,7 @@ "assignerShortName": "ProgressSoftware", "dateReserved": "2026-10-22T10:41:52.792Z", "datePublished": "2026-11-09T16:47:31.408Z", - "dateUpdated": "2026-11-09T16:47:31.408Z" + "dateUpdated": "2026-11-12T16:47:58.302Z" }, "containers": { "cna": { @@ -136,6 +136,40 @@ "x_generator": { "engine": "Vulnogram 0.2.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:47:38.585254Z", + "id": "CVE-2026-115340", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:47:58.302Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/115xxx/CVE-2026-115864.json b/data/2026/115xxx/CVE-2026-115864.json index f779651e75..571773d01c 100644 --- a/data/2026/115xxx/CVE-2026-115864.json +++ b/data/2026/115xxx/CVE-2026-115864.json @@ -8,7 +8,7 @@ "assignerShortName": "CPANSec", "dateReserved": "2026-10-23T17:37:33.626Z", "datePublished": "2026-11-09T21:16:28.102Z", - "dateUpdated": "2026-11-10T00:11:03.849Z" + "dateUpdated": "2026-11-12T17:08:12.238Z" }, "containers": { "cna": { @@ -104,6 +104,54 @@ "shortName": "CVE", "dateUpdated": "2026-11-10T00:11:03.849Z" } + }, + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.5, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "NONE" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:07:56.467802Z", + "id": "CVE-2026-115864", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:08:12.238Z" + } } ] } diff --git a/data/2026/115xxx/CVE-2026-115934.json b/data/2026/115xxx/CVE-2026-115934.json index bb5124544a..428842752c 100644 --- a/data/2026/115xxx/CVE-2026-115934.json +++ b/data/2026/115xxx/CVE-2026-115934.json @@ -8,7 +8,7 @@ "assignerShortName": "Hackrate", "dateReserved": "2026-10-23T21:23:17.389Z", "datePublished": "2026-11-09T22:57:57.368Z", - "dateUpdated": "2026-11-09T23:06:37.426Z" + "dateUpdated": "2026-11-12T17:06:16.752Z" }, "containers": { "cna": { @@ -222,6 +222,40 @@ "x_generator": { "engine": "Vulnogram 1.0.4" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:05:57.922658Z", + "id": "CVE-2026-115934", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:06:16.752Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/117xxx/CVE-2026-117477.json b/data/2026/117xxx/CVE-2026-117477.json index c56733ff82..ed3520c806 100644 --- a/data/2026/117xxx/CVE-2026-117477.json +++ b/data/2026/117xxx/CVE-2026-117477.json @@ -8,7 +8,7 @@ "assignerShortName": "jpcert", "dateReserved": "2026-10-27T06:16:54.712Z", "datePublished": "2026-11-09T23:22:12.476Z", - "dateUpdated": "2026-11-12T05:44:32.062Z" + "dateUpdated": "2026-11-12T17:07:12.689Z" }, "containers": { "cna": { @@ -194,6 +194,40 @@ "shortName": "jpcert", "dateUpdated": "2026-11-12T05:44:32.062Z" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:06:48.863736Z", + "id": "CVE-2026-117477", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:07:12.689Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118492.json b/data/2026/118xxx/CVE-2026-118492.json index b97910d9ba..16cc8ff8ab 100644 --- a/data/2026/118xxx/CVE-2026-118492.json +++ b/data/2026/118xxx/CVE-2026-118492.json @@ -8,7 +8,7 @@ "assignerShortName": "eclipse", "dateReserved": "2026-10-28T11:37:34.094Z", "datePublished": "2026-11-09T15:57:23.409Z", - "dateUpdated": "2026-11-09T15:57:23.409Z" + "dateUpdated": "2026-11-12T16:26:15.625Z" }, "containers": { "cna": { @@ -127,6 +127,48 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/eclipse-langium/langium/security/advisories/GHSA-7c4f-7qwx-hmcv", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:25:53.162104Z", + "id": "CVE-2026-118492", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:26:15.625Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119079.json b/data/2026/119xxx/CVE-2026-119079.json index bf3a774570..4d37dd1f02 100644 --- a/data/2026/119xxx/CVE-2026-119079.json +++ b/data/2026/119xxx/CVE-2026-119079.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-29T13:10:23.375Z", "datePublished": "2026-11-09T18:43:39.044Z", - "dateUpdated": "2026-11-12T12:57:13.364Z" + "dateUpdated": "2026-11-12T16:48:13.854Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "krb5", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.21.3-10.el10_2.2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +144,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99625", + "name": "RHSA-2026:99625", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-119079", "tags": [ @@ -183,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T12:57:13.364Z" + "dateUpdated": "2026-11-12T16:48:13.854Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/119xxx/CVE-2026-119274.json b/data/2026/119xxx/CVE-2026-119274.json index 6e10517fa4..f5283440a4 100644 --- a/data/2026/119xxx/CVE-2026-119274.json +++ b/data/2026/119xxx/CVE-2026-119274.json @@ -8,7 +8,7 @@ "assignerShortName": "Infoblox", "dateReserved": "2026-10-29T18:33:42.678Z", "datePublished": "2026-11-09T13:19:41.967Z", - "dateUpdated": "2026-11-09T14:12:39.937Z" + "dateUpdated": "2026-11-12T16:19:01.521Z" }, "containers": { "cna": { @@ -111,6 +111,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:18:37.808188Z", + "id": "CVE-2026-119274", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:19:01.521Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119474.json b/data/2026/119xxx/CVE-2026-119474.json index 2ad604f974..df4a2c7591 100644 --- a/data/2026/119xxx/CVE-2026-119474.json +++ b/data/2026/119xxx/CVE-2026-119474.json @@ -8,7 +8,7 @@ "assignerShortName": "TR-CERT", "dateReserved": "2026-10-30T08:49:23.814Z", "datePublished": "2026-11-09T14:19:45.883Z", - "dateUpdated": "2026-11-09T14:19:45.883Z" + "dateUpdated": "2026-11-12T16:20:59.367Z" }, "containers": { "cna": { @@ -120,6 +120,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:20:41.102726Z", + "id": "CVE-2026-119474", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:20:59.367Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120627.json b/data/2026/120xxx/CVE-2026-120627.json index 88362cdfb0..c61894c07d 100644 --- a/data/2026/120xxx/CVE-2026-120627.json +++ b/data/2026/120xxx/CVE-2026-120627.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-02T17:31:22.160Z", "datePublished": "2026-11-02T17:32:34.968Z", - "dateUpdated": "2026-11-11T20:18:59.139Z" + "dateUpdated": "2026-11-12T16:47:47.072Z" }, "containers": { "cna": { @@ -20,7 +20,7 @@ } ], "source": { - "discovery": "Souparna Majumder" + "discovery": "UNKNOWN" }, "affected": [ { @@ -54,15 +54,22 @@ "url": "https://github.com/Rexyysilent/PI-ay-ay-disclosure" } ], + "credits": [ + { + "lang": "en", + "value": "Souparna Majumder", + "type": "finder" + } + ], "x_generator": { - "engine": "VINCE 4.0.2", + "engine": "VINCE 4.0.3", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-120627" }, "providerMetadata": { "orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", - "dateUpdated": "2026-11-11T20:18:59.139Z" + "dateUpdated": "2026-11-12T16:47:47.072Z" } }, "adp": [ diff --git a/data/2026/121xxx/CVE-2026-121685.json b/data/2026/121xxx/CVE-2026-121685.json index 5857a20ad9..51fe98b824 100644 --- a/data/2026/121xxx/CVE-2026-121685.json +++ b/data/2026/121xxx/CVE-2026-121685.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-03T19:36:53.606Z", "datePublished": "2026-11-09T16:23:05.993Z", - "dateUpdated": "2026-11-09T16:23:05.993Z" + "dateUpdated": "2026-11-12T16:48:55.047Z" }, "containers": { "cna": { @@ -65,6 +65,68 @@ "shortName": "certcc", "dateUpdated": "2026-11-09T16:23:05.993Z" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-798", + "lang": "en", + "description": "CWE-798 Use of Hard-coded Credentials" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:48:49.678686Z", + "id": "CVE-2026-121685", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:48:55.047Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121686.json b/data/2026/121xxx/CVE-2026-121686.json index ef89e518a6..c0057685f8 100644 --- a/data/2026/121xxx/CVE-2026-121686.json +++ b/data/2026/121xxx/CVE-2026-121686.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-03T19:37:04.418Z", "datePublished": "2026-11-09T16:24:04.920Z", - "dateUpdated": "2026-11-09T16:24:04.920Z" + "dateUpdated": "2026-11-12T16:50:18.235Z" }, "containers": { "cna": { @@ -65,6 +65,68 @@ "shortName": "certcc", "dateUpdated": "2026-11-09T16:24:04.920Z" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-78", + "lang": "en", + "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:50:09.162760Z", + "id": "CVE-2026-121686", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:50:18.235Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121687.json b/data/2026/121xxx/CVE-2026-121687.json index a819372122..da661fa783 100644 --- a/data/2026/121xxx/CVE-2026-121687.json +++ b/data/2026/121xxx/CVE-2026-121687.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-03T19:37:12.923Z", "datePublished": "2026-11-09T16:25:00.570Z", - "dateUpdated": "2026-11-09T16:25:00.570Z" + "dateUpdated": "2026-11-12T16:53:40.336Z" }, "containers": { "cna": { @@ -65,6 +65,68 @@ "shortName": "certcc", "dateUpdated": "2026-11-09T16:25:00.570Z" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-306", + "lang": "en", + "description": "CWE-306 Missing Authentication for Critical Function" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:53:15.574843Z", + "id": "CVE-2026-121687", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:53:40.336Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121688.json b/data/2026/121xxx/CVE-2026-121688.json index 3c67648160..184f39a2fe 100644 --- a/data/2026/121xxx/CVE-2026-121688.json +++ b/data/2026/121xxx/CVE-2026-121688.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-03T19:37:24.066Z", "datePublished": "2026-11-09T16:25:50.773Z", - "dateUpdated": "2026-11-09T16:25:50.773Z" + "dateUpdated": "2026-11-12T16:55:03.614Z" }, "containers": { "cna": { @@ -65,6 +65,68 @@ "shortName": "certcc", "dateUpdated": "2026-11-09T16:25:50.773Z" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-494", + "lang": "en", + "description": "CWE-494 Download of Code Without Integrity Check" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.1, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:54:54.914760Z", + "id": "CVE-2026-121688", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:55:03.614Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121689.json b/data/2026/121xxx/CVE-2026-121689.json index eadf755791..fd7fb71a75 100644 --- a/data/2026/121xxx/CVE-2026-121689.json +++ b/data/2026/121xxx/CVE-2026-121689.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-03T19:37:38.749Z", "datePublished": "2026-11-09T16:27:03.106Z", - "dateUpdated": "2026-11-09T16:27:03.106Z" + "dateUpdated": "2026-11-12T16:56:37.142Z" }, "containers": { "cna": { @@ -65,6 +65,56 @@ "shortName": "certcc", "dateUpdated": "2026-11-09T16:27:03.106Z" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.5, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:55:55.437322Z", + "id": "CVE-2026-121689", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:56:37.142Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121690.json b/data/2026/121xxx/CVE-2026-121690.json index 55bd7ab769..896d41f696 100644 --- a/data/2026/121xxx/CVE-2026-121690.json +++ b/data/2026/121xxx/CVE-2026-121690.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-03T19:37:50.573Z", "datePublished": "2026-11-09T16:31:12.883Z", - "dateUpdated": "2026-11-09T16:31:12.883Z" + "dateUpdated": "2026-11-12T17:00:05.885Z" }, "containers": { "cna": { @@ -65,6 +65,68 @@ "shortName": "certcc", "dateUpdated": "2026-11-09T16:31:12.883Z" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-250", + "lang": "en", + "description": "CWE-250 Execution with Unnecessary Privileges" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.7, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "HIGH", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:59:55.095222Z", + "id": "CVE-2026-121690", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:00:05.885Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121841.json b/data/2026/121xxx/CVE-2026-121841.json index 680698415e..9a0fff5eda 100644 --- a/data/2026/121xxx/CVE-2026-121841.json +++ b/data/2026/121xxx/CVE-2026-121841.json @@ -8,7 +8,7 @@ "assignerShortName": "mozilla", "dateReserved": "2026-11-04T07:47:08.439Z", "datePublished": "2026-11-09T13:42:32.619Z", - "dateUpdated": "2026-11-09T13:42:32.619Z" + "dateUpdated": "2026-11-12T16:26:22.329Z" }, "containers": { "cna": { @@ -59,6 +59,67 @@ "shortName": "mozilla", "dateUpdated": "2026-11-09T13:42:32.619Z" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "lang": "en", + "description": "CWE-noinfo Not enough information" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.3, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "integrityImpact": "LOW", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "LOW", + "privilegesRequired": "NONE", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:26:17.170739Z", + "id": "CVE-2026-121841", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:26:22.329Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121876.json b/data/2026/121xxx/CVE-2026-121876.json new file mode 100644 index 0000000000..146104af0a --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121876.json @@ -0,0 +1,227 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121876", + "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", + "state": "PUBLISHED", + "assignerShortName": "redhat", + "dateReserved": "2026-11-04T10:34:49.034Z", + "datePublished": "2026-11-12T16:55:35.424Z", + "dateUpdated": "2026-11-12T16:55:35.424Z" + }, + "containers": { + "cna": { + "title": "Sandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)", + "metrics": [ + { + "other": { + "content": { + "value": "Important", + "namespace": "https://access.redhat.com/security/updates/classification/" + }, + "type": "Red Hat severity rating" + } + }, + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "LOCAL", + "availabilityImpact": "NONE", + "baseScore": 7.9, + "baseSeverity": "HIGH", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "HIGH", + "scope": "CHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", + "version": "3.1" + }, + "format": "CVSS" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A flaw was found in the interaction between systemd-gpt-auto-generator and \nconfidential computing guest VM images in OpenShift Sandboxed Containers \n(confidential peer pods). systemd-gpt-auto-generator automatically discovers \nand mounts GPT partitions by type GUID at boot with no user confirmation. In \nthe confidential computing threat model, where the host/hypervisor is the \nadversary, a malicious host can inject partitions into the guest's virtual \ndisk. Most critically, injecting a swap partition causes the guest kernel to \npage out TEE-encrypted memory to a host-controlled block device, breaking the \nconfidentiality guarantee of the hardware TEE (AMD SEV-SNP, Intel TDX).\n\nThe PodVM images use a GPT-partitioned disk with dm-verity on the root \npartition. However, the roothash= kernel parameter only disables root \nauto-discovery — non-root partitions (swap, /home, /var, /srv, /var/tmp) are \nstill auto-discovered and mounted. The generator is shipped unmasked in the \nRHEL systemd-udev subpackage, and no kernel command line parameter in the \nmeasured UKI addon disables it. Additionally, the PodVM measurement script \ncaptures PCRs 3, 9, 11, and 12, but not PCR 5 (GPT partition table), so \npartition table modifications are not detected by remote attestation." + } + ], + "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "kernel", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:enterprise_linux:10" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 6", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "kernel", + "defaultStatus": "affected", + "cpes": [ + "cpe:/o:redhat:rhel_els:6" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 7", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "kernel", + "defaultStatus": "affected", + "cpes": [ + "cpe:/o:redhat:rhel_els:7" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 7", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "kernel-rt", + "defaultStatus": "affected", + "cpes": [ + "cpe:/o:redhat:rhel_els:7" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "kernel", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:enterprise_linux:8" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "kernel-rt", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:enterprise_linux:8" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 9", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "kernel", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:enterprise_linux:9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 9", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "kernel-rt", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:enterprise_linux:9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "openshift/ose-rhel-coreos-8", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:openshift:4" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "openshift/ose-rhel-coreos-9", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:openshift:4" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 5", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "openshift/ose-rhel-coreos-9", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:openshift:5" + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2026-121876", + "tags": [ + "vdb-entry", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2558210", + "name": "RHBZ#2558210", + "tags": [ + "issue-tracking", + "x_refsource_REDHAT" + ] + } + ], + "datePublic": "2026-11-12T14:00:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-359", + "description": "Exposure of Private Personal Information to an Unauthorized Actor", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "x_redhatCweChain": "CWE-359: Exposure of Private Personal Information to an Unauthorized Actor", + "workarounds": [ + { + "lang": "en", + "value": "Add systemd.gpt_auto=0 to the measured kernel command line (UKI addon) to completely \ndisable systemd-gpt-auto-generator. Since the PodVM already uses explicit partition \nlayout and dm-verity, auto-discovery is unnecessary.\n\nAlternative mitigations:\n- Disable swap specifically: add systemd.swap=0 to the kernel command line\n- Mask the generator in the guest image: \n ln -sf /dev/null /etc/systemd/system-generators/systemd-gpt-auto-generator\n- Include PCR 5 in the PodVM measurement script alongside PCRs 3, 9, 11, 12\n- For systemd 254+: set restrictive image policy via systemd.image_policy=root=verity+signed+encrypted+unprotected+absent:swap=absent:home=absent:srv=absent:var=absent:tmp=absent" + } + ], + "timeline": [ + { + "lang": "en", + "time": "2026-10-16T00:00:00.000Z", + "value": "Reported to Red Hat." + }, + { + "lang": "en", + "time": "2026-11-12T14:00:00.000Z", + "value": "Made public." + } + ], + "credits": [ + { + "lang": "en", + "value": "Red Hat would like to thank Spyros Seimenis (Edgeless Systems) for reporting this issue." + } + ], + "providerMetadata": { + "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", + "shortName": "redhat", + "dateUpdated": "2026-11-12T16:55:35.424Z" + }, + "x_generator": { + "engine": "cvelib 1.8.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123753.json b/data/2026/123xxx/CVE-2026-123753.json index 8d6ad79694..048e08daf6 100644 --- a/data/2026/123xxx/CVE-2026-123753.json +++ b/data/2026/123xxx/CVE-2026-123753.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-11-06T13:16:11.385Z", "datePublished": "2026-11-09T10:28:48.990Z", - "dateUpdated": "2026-11-09T11:08:56.098Z" + "dateUpdated": "2026-11-12T16:22:22.516Z" }, "containers": { "cna": { @@ -130,6 +130,54 @@ "shortName": "CVE", "dateUpdated": "2026-11-09T11:08:56.098Z" } + }, + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.1, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:22:17.477533Z", + "id": "CVE-2026-123753", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:22:22.516Z" + } } ] } diff --git a/data/2026/123xxx/CVE-2026-123779.json b/data/2026/123xxx/CVE-2026-123779.json index 7d5af880fc..e159078393 100644 --- a/data/2026/123xxx/CVE-2026-123779.json +++ b/data/2026/123xxx/CVE-2026-123779.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-11-06T14:27:45.371Z", "datePublished": "2026-11-09T10:29:30.229Z", - "dateUpdated": "2026-11-09T11:09:03.661Z" + "dateUpdated": "2026-11-12T16:25:02.402Z" }, "containers": { "cna": { @@ -146,6 +146,54 @@ "shortName": "CVE", "dateUpdated": "2026-11-09T11:09:03.661Z" } + }, + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 5.3, + "attackVector": "NETWORK", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:24:55.842592Z", + "id": "CVE-2026-123779", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:25:02.402Z" + } } ] } diff --git a/data/2026/123xxx/CVE-2026-123790.json b/data/2026/123xxx/CVE-2026-123790.json index 51e5287742..11f45289f3 100644 --- a/data/2026/123xxx/CVE-2026-123790.json +++ b/data/2026/123xxx/CVE-2026-123790.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-06T14:47:00.908Z", "datePublished": "2026-11-12T14:48:30.110Z", - "dateUpdated": "2026-11-12T15:13:46.135Z" + "dateUpdated": "2026-11-12T17:05:16.327Z" }, "containers": { "cna": { @@ -67,6 +67,21 @@ "shortName": "certcc", "dateUpdated": "2026-11-12T15:13:46.135Z" } - } + }, + "adp": [ + { + "title": "CVE Program Container", + "references": [ + { + "url": "https://www.kb.cert.org/vuls/id/944667" + } + ], + "providerMetadata": { + "orgId": "af854a3a-2127-422b-91ae-364da2661108", + "shortName": "CVE", + "dateUpdated": "2026-11-12T17:05:16.327Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124018.json b/data/2026/124xxx/CVE-2026-124018.json index f4f01c0a5d..e9865d75d7 100644 --- a/data/2026/124xxx/CVE-2026-124018.json +++ b/data/2026/124xxx/CVE-2026-124018.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.544Z", "datePublished": "2026-11-12T13:35:12.175Z", - "dateUpdated": "2026-11-12T13:35:12.175Z" + "dateUpdated": "2026-11-12T17:17:47.526Z" }, "containers": { "cna": { @@ -140,6 +140,40 @@ "x_generator": { "engine": "vulncheck" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:38:20.354317Z", + "id": "CVE-2026-124018", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:17:47.526Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124033.json b/data/2026/124xxx/CVE-2026-124033.json index a39d94457e..730bc943a3 100644 --- a/data/2026/124xxx/CVE-2026-124033.json +++ b/data/2026/124xxx/CVE-2026-124033.json @@ -8,7 +8,7 @@ "assignerShortName": "AMZN", "dateReserved": "2026-11-06T18:55:25.625Z", "datePublished": "2026-11-09T21:05:06.845Z", - "dateUpdated": "2026-11-09T21:10:01.049Z" + "dateUpdated": "2026-11-12T17:01:07.789Z" }, "containers": { "cna": { @@ -173,6 +173,40 @@ "x_generator": { "engine": "Vulnogram 0.5.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:00:43.978105Z", + "id": "CVE-2026-124033", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:01:07.789Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124034.json b/data/2026/124xxx/CVE-2026-124034.json index 269da4c4e4..83c6278308 100644 --- a/data/2026/124xxx/CVE-2026-124034.json +++ b/data/2026/124xxx/CVE-2026-124034.json @@ -8,7 +8,7 @@ "assignerShortName": "AMZN", "dateReserved": "2026-11-06T18:55:26.095Z", "datePublished": "2026-11-09T22:27:36.976Z", - "dateUpdated": "2026-11-09T22:32:51.158Z" + "dateUpdated": "2026-11-12T17:02:13.268Z" }, "containers": { "cna": { @@ -180,6 +180,40 @@ "x_generator": { "engine": "Vulnogram 0.5.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:01:54.698784Z", + "id": "CVE-2026-124034", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:02:13.268Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124035.json b/data/2026/124xxx/CVE-2026-124035.json index 07f694efe6..2d8adf8e50 100644 --- a/data/2026/124xxx/CVE-2026-124035.json +++ b/data/2026/124xxx/CVE-2026-124035.json @@ -8,7 +8,7 @@ "assignerShortName": "AMZN", "dateReserved": "2026-11-06T18:55:26.778Z", "datePublished": "2026-11-09T22:28:39.044Z", - "dateUpdated": "2026-11-09T22:34:22.012Z" + "dateUpdated": "2026-11-12T17:03:05.901Z" }, "containers": { "cna": { @@ -180,6 +180,40 @@ "x_generator": { "engine": "Vulnogram 0.5.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:02:46.138932Z", + "id": "CVE-2026-124035", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:03:05.901Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124249.json b/data/2026/124xxx/CVE-2026-124249.json index 3307a39c7c..c28ef2deaf 100644 --- a/data/2026/124xxx/CVE-2026-124249.json +++ b/data/2026/124xxx/CVE-2026-124249.json @@ -8,7 +8,7 @@ "assignerShortName": "PSF", "dateReserved": "2026-11-07T00:18:32.381Z", "datePublished": "2026-11-09T14:20:47.891Z", - "dateUpdated": "2026-11-11T00:25:56.116Z" + "dateUpdated": "2026-11-12T16:23:47.134Z" }, "containers": { "cna": { @@ -172,6 +172,38 @@ "shortName": "CVE", "dateUpdated": "2026-11-09T21:04:57.164Z" } + }, + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:23:30.385286Z", + "id": "CVE-2026-124249", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:23:47.134Z" + } } ] } diff --git a/data/2026/124xxx/CVE-2026-124598.json b/data/2026/124xxx/CVE-2026-124598.json index 145bdd202f..5bab7ae97f 100644 --- a/data/2026/124xxx/CVE-2026-124598.json +++ b/data/2026/124xxx/CVE-2026-124598.json @@ -8,7 +8,7 @@ "assignerShortName": "GV", "dateReserved": "2026-11-09T01:42:46.616Z", "datePublished": "2026-11-10T00:18:17.969Z", - "dateUpdated": "2026-11-10T00:18:17.969Z" + "dateUpdated": "2026-11-12T17:08:39.602Z" }, "containers": { "cna": { @@ -137,6 +137,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:08:18.909919Z", + "id": "CVE-2026-124598", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:08:39.602Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124691.json b/data/2026/124xxx/CVE-2026-124691.json new file mode 100644 index 0000000000..f9845abe4f --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124691.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124691", + "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "state": "PUBLISHED", + "assignerShortName": "ProgressSoftware", + "dateReserved": "2026-11-09T10:41:42.890Z", + "datePublished": "2026-11-12T16:42:30.326Z", + "dateUpdated": "2026-11-12T16:47:05.093Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "shortName": "ProgressSoftware", + "dateUpdated": "2026-11-12T16:47:05.093Z" + }, + "title": "Cross-Site Scripting in Kendo UI for jQuery Gantt Parent Dropdown", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-79", + "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-63", + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Scripting (XSS)" + } + ] + } + ], + "affected": [ + { + "vendor": "Progress Software", + "product": "Kendo UI for jQuery", + "versions": [ + { + "status": "affected", + "version": "2020.3.915", + "lessThanOrEqual": "2026.3.1015", + "versionType": "custom" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Progress Kendo UI for jQuery Gantt, the task editor's Parent dropdown renders task titles as HTML. An attacker who can influence a task title shown in the dropdown can cause attacker-controlled markup to execute as JavaScript when a user opens or interacts with the task editor. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. The first affected version is 2020.3.915; the latest vulnerable version is 2026.3.1015. The issue is fixed in version 2026.4.1111.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Progress Kendo UI for jQuery Gantt, the task editor's Parent dropdown renders task titles as HTML. An attacker who can influence a task title shown in the dropdown can cause attacker-controlled markup to execute as JavaScript when a user opens or interacts with the task editor. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. The first affected version is 2020.3.915; the latest vulnerable version is 2026.3.1015. The issue is fixed in version 2026.4.1111.

" + } + ] + } + ], + "references": [ + { + "url": "https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-kendo-gantt-parent-dropdown-xss-cve-2026-124691", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Abhishek Nandkumar Bhaskar (Abhi-Hackz)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124695.json b/data/2026/124xxx/CVE-2026-124695.json new file mode 100644 index 0000000000..47c46a912d --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124695.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124695", + "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "state": "PUBLISHED", + "assignerShortName": "ProgressSoftware", + "dateReserved": "2026-11-09T10:41:42.890Z", + "datePublished": "2026-11-12T16:52:14.648Z", + "dateUpdated": "2026-11-12T16:52:14.648Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "shortName": "ProgressSoftware", + "dateUpdated": "2026-11-12T16:52:14.648Z" + }, + "title": "Cross-Site Scripting in Kendo UI for jQuery Form Item Hints", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-79", + "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-63", + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Scripting (XSS)" + } + ] + } + ], + "affected": [ + { + "vendor": "Progress Software", + "product": "Kendo UI for jQuery", + "versions": [ + { + "status": "affected", + "version": "2020.2.513", + "lessThanOrEqual": "2026.3.1015", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Progress Kendo UI for jQuery Form, the items[].hint option is documented as a string but is rendered as HTML. An attacker who can influence a Form item's hint can cause attacker-controlled markup to execute as JavaScript when a user views the rendered form. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. The first affected version is 2020.2.513; the latest vulnerable version is 2026.3.1015. The issue is fixed in version 2026.4.1111.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Progress Kendo UI for jQuery Form, the items[].hint option is documented as a string but is rendered as HTML. An attacker who can influence a Form item's hint can cause attacker-controlled markup to execute as JavaScript when a user views the rendered form. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. The first affected version is 2020.2.513; the latest vulnerable version is 2026.3.1015. The issue is fixed in version 2026.4.1111.

" + } + ] + } + ], + "references": [ + { + "url": "https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-kendo-form-item-hint-xss-cve-2026-124695", + "tags": [ + "vendor-advisory" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Abhishek Nandkumar Bhaskar (Abhi-Hackz)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 0.2.0" + }, + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124696.json b/data/2026/124xxx/CVE-2026-124696.json new file mode 100644 index 0000000000..5d787f9725 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124696.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124696", + "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "state": "PUBLISHED", + "assignerShortName": "ProgressSoftware", + "dateReserved": "2026-11-09T10:41:43.932Z", + "datePublished": "2026-11-12T17:02:11.806Z", + "dateUpdated": "2026-11-12T17:02:11.806Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "shortName": "ProgressSoftware", + "dateUpdated": "2026-11-12T17:02:11.806Z" + }, + "title": "Cross-Site Scripting in Kendo UI for jQuery Spreadsheet Sheet Names", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-79", + "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-63", + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Scripting (XSS)" + } + ] + } + ], + "affected": [ + { + "vendor": "Progress Software", + "product": "Kendo UI for jQuery", + "versions": [ + { + "status": "affected", + "version": "2024.4.1112", + "lessThanOrEqual": "2026.3.1015", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Progress Kendo UI for jQuery, Spreadsheet sheet names are inserted into the SheetsBar menu button's data-sheet-name attribute without encoding. An attacker who can influence a sheet name can inject an event-handler attribute and execute JavaScript when a user hovers over the menu button. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. The first affected version is 2024.4.1112; the latest vulnerable version is 2026.3.1015. The issue is fixed in version 2026.4.1111.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Progress Kendo UI for jQuery, Spreadsheet sheet names are inserted into the SheetsBar menu button's data-sheet-name attribute without encoding. An attacker who can influence a sheet name can inject an event-handler attribute and execute JavaScript when a user hovers over the menu button. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. The first affected version is 2024.4.1112; the latest vulnerable version is 2026.3.1015. The issue is fixed in version 2026.4.1111.

" + } + ] + } + ], + "references": [ + { + "url": "https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-kendo-spreadsheet-sheet-names-xss-cve-2026-124696", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Abhishek Nandkumar Bhaskar (Abhi-Hackz)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124697.json b/data/2026/124xxx/CVE-2026-124697.json new file mode 100644 index 0000000000..29f6afcff4 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124697.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124697", + "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "state": "PUBLISHED", + "assignerShortName": "ProgressSoftware", + "dateReserved": "2026-11-09T10:41:43.933Z", + "datePublished": "2026-11-12T17:06:27.602Z", + "dateUpdated": "2026-11-12T17:06:27.602Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "shortName": "ProgressSoftware", + "dateUpdated": "2026-11-12T17:06:27.602Z" + }, + "title": "Cross-Site Scripting in Kendo UI for jQuery Chart Shared Tooltip", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-79", + "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-63", + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Scripting (XSS)" + } + ] + } + ], + "affected": [ + { + "vendor": "Progress Software", + "product": "Kendo UI for jQuery", + "versions": [ + { + "status": "affected", + "version": "2016.2.607", + "lessThanOrEqual": "2026.3.1015", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Progress Kendo UI for jQuery, Chart shared-tooltip rendering treats bound category and series-name values as raw HTML. An attacker who can influence values consumed by an affected Chart can inject markup that executes as JavaScript when a user displays the shared tooltip. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. Version 2016.2.607 or earlier may be affected, but earlier releases have not been verified. The latest vulnerable version is 2026.3.1015; the issue is fixed in version 2026.4.1111.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Progress Kendo UI for jQuery, Chart shared-tooltip rendering treats bound category and series-name values as raw HTML. An attacker who can influence values consumed by an affected Chart can inject markup that executes as JavaScript when a user displays the shared tooltip. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. Version 2016.2.607 or earlier may be affected, but earlier releases have not been verified. The latest vulnerable version is 2026.3.1015; the issue is fixed in version 2026.4.1111.

" + } + ] + } + ], + "references": [ + { + "url": "https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-kendo-chart-shared-tooltip-xss-cve-2026-124697", + "tags": [ + "vendor-advisory" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Abhishek Nandkumar Bhaskar (Abhi-Hackz)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 0.2.0" + }, + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124698.json b/data/2026/124xxx/CVE-2026-124698.json new file mode 100644 index 0000000000..0cbc523f3f --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124698.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124698", + "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "state": "PUBLISHED", + "assignerShortName": "ProgressSoftware", + "dateReserved": "2026-11-09T10:41:43.933Z", + "datePublished": "2026-11-12T17:09:34.698Z", + "dateUpdated": "2026-11-12T17:09:34.698Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "shortName": "ProgressSoftware", + "dateUpdated": "2026-11-12T17:09:34.698Z" + }, + "title": "Cross-Site Scripting in Kendo UI for jQuery Chart Shared Tooltip", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-79", + "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-63", + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Scripting (XSS)" + } + ] + } + ], + "affected": [ + { + "vendor": "Progress Software", + "product": "Kendo UI for jQuery", + "versions": [ + { + "status": "affected", + "version": "2016.2.607", + "lessThanOrEqual": "2026.3.1015", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Progress Kendo UI for jQuery, the Chart default tooltip renders point values as raw HTML. An attacker who can influence a string point value can inject markup that executes as JavaScript when a user hovers over the point. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. Version 2016.2.607 or earlier may be affected, but earlier releases have not been verified. The latest vulnerable version is 2026.3.1015; the issue is fixed in version 2026.4.1111.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Progress Kendo UI for jQuery, the Chart default tooltip renders point values as raw HTML. An attacker who can influence a string point value can inject markup that executes as JavaScript when a user hovers over the point. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. Version 2016.2.607 or earlier may be affected, but earlier releases have not been verified. The latest vulnerable version is 2026.3.1015; the issue is fixed in version 2026.4.1111.

" + } + ] + } + ], + "references": [ + { + "url": "https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-kendo-chart-tooltip-point-value-xss-cve-2026-124698", + "tags": [ + "vendor-advisory" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Abhishek Nandkumar Bhaskar (Abhi-Hackz)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 0.2.0" + }, + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124850.json b/data/2026/124xxx/CVE-2026-124850.json index 06a612e5f8..47f9702cc8 100644 --- a/data/2026/124xxx/CVE-2026-124850.json +++ b/data/2026/124xxx/CVE-2026-124850.json @@ -8,7 +8,7 @@ "assignerShortName": "CIRCL", "dateReserved": "2026-11-09T14:38:45.169Z", "datePublished": "2026-11-09T14:43:27.959Z", - "dateUpdated": "2026-11-09T14:43:27.959Z" + "dateUpdated": "2026-11-12T16:24:54.028Z" }, "containers": { "cna": { @@ -320,6 +320,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:24:26.530803Z", + "id": "CVE-2026-124850", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:24:54.028Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124959.json b/data/2026/124xxx/CVE-2026-124959.json index 99258c2806..60199f7c98 100644 --- a/data/2026/124xxx/CVE-2026-124959.json +++ b/data/2026/124xxx/CVE-2026-124959.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-09T15:02:37.082Z", "datePublished": "2026-11-09T15:04:38.649Z", - "dateUpdated": "2026-11-09T15:04:38.649Z" + "dateUpdated": "2026-11-12T16:41:04.273Z" }, "containers": { "cna": { @@ -79,6 +79,68 @@ "shortName": "certcc", "dateUpdated": "2026-11-09T15:04:38.649Z" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-787", + "lang": "en", + "description": "CWE-787 Out-of-bounds Write" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.1, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "REQUIRED", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "NONE" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:40:51.440851Z", + "id": "CVE-2026-124959", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:41:04.273Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126189.json b/data/2026/126xxx/CVE-2026-126189.json new file mode 100644 index 0000000000..0c69e84f9f --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126189.json @@ -0,0 +1,112 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126189", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-10T20:07:44.957Z", + "datePublished": "2026-11-12T16:53:00.822Z", + "dateUpdated": "2026-11-12T16:53:00.822Z" + }, + "containers": { + "cna": { + "title": "Soup Sieve: Quadratic-time denial of service when matching `:has()`", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-407", + "lang": "en", + "description": "CWE-407: Inefficient Algorithmic Complexity", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "LOW", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-8jvp-3x96-xpqw", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-8jvp-3x96-xpqw" + }, + { + "name": "https://github.com/facelessuser/soupsieve/pull/352", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/pull/352" + }, + { + "name": "https://github.com/facelessuser/soupsieve/commit/0469c148f5501ec2127e0d65b77c2a1c395fa379", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/commit/0469c148f5501ec2127e0d65b77c2a1c395fa379" + }, + { + "name": "https://github.com/facelessuser/soupsieve/commit/305fbf6b8c1f6ff05fec55d1e5bb28d80d22de44", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/commit/305fbf6b8c1f6ff05fec55d1e5bb28d80d22de44" + }, + { + "name": "https://github.com/facelessuser/soupsieve/releases/tag/4.0.1", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/releases/tag/4.0.1" + } + ], + "affected": [ + { + "vendor": "facelessuser", + "product": "soupsieve", + "versions": [ + { + "version": "< 4.0.1", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-12T16:53:00.822Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 4.0.1, Soup Sieve repeatedly searches descendant subtrees for each candidate evaluated by :has() and repeatedly reevaluates a parent containing :has(> ...) for each child, causing quadratic matching on deeply nested or wide attacker-influenced HTML or XML. Applications using ordinary fixed selectors through select(), select_one(), or Beautiful Soup CSS APIs against untrusted documents can have a worker occupied for seconds or minutes, while applications that process only trusted documents are not affected. Selectors compiled with NOCACHE continue to use the old uncached behavior. This issue is fixed in version 4.0.1." + } + ], + "source": { + "advisory": "GHSA-8jvp-3x96-xpqw", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126190.json b/data/2026/126xxx/CVE-2026-126190.json new file mode 100644 index 0000000000..213beff4d6 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126190.json @@ -0,0 +1,105 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126190", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-10T20:07:44.957Z", + "datePublished": "2026-11-12T16:54:14.644Z", + "dateUpdated": "2026-11-12T16:54:14.644Z" + }, + "containers": { + "cna": { + "title": "Soup Sieve: Polynomial-time denial of service in the descendant combinator", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-407", + "lang": "en", + "description": "CWE-407: Inefficient Algorithmic Complexity", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-mmhr-3c5m-f64f", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-mmhr-3c5m-f64f" + }, + { + "name": "https://github.com/facelessuser/soupsieve/pull/351", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/pull/351" + }, + { + "name": "https://github.com/facelessuser/soupsieve/commit/ff1a5ce7e5addc31626d7b6053511fecdb4f6320", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/commit/ff1a5ce7e5addc31626d7b6053511fecdb4f6320" + }, + { + "name": "https://github.com/facelessuser/soupsieve/releases/tag/4.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/releases/tag/4.0" + } + ], + "affected": [ + { + "vendor": "facelessuser", + "product": "soupsieve", + "versions": [ + { + "version": "< 4.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-12T16:54:14.644Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 4.0, Soup Sieve repeatedly walks the same ancestors while matching descendant combinators, and each additional descendant combinator raises the polynomial degree of the work on deeply nested attacker-influenced HTML or XML. Applications using selectors such as section div div through select(), select_one(), or Beautiful Soup CSS APIs against untrusted documents can have a worker occupied for seconds or minutes, while trusted-only document processing is not affected. Selectors compiled with NOCACHE continue to use the old uncached behavior. This issue is fixed in version 4.0." + } + ], + "source": { + "advisory": "GHSA-mmhr-3c5m-f64f", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126191.json b/data/2026/126xxx/CVE-2026-126191.json new file mode 100644 index 0000000000..7033d92abd --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126191.json @@ -0,0 +1,105 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126191", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-10T20:07:44.957Z", + "datePublished": "2026-11-12T16:57:01.566Z", + "dateUpdated": "2026-11-12T16:57:01.566Z" + }, + "containers": { + "cna": { + "title": "Soup Sieve: Exponential ReDoS in selector compilation via \\9-run in CSS_ESCAPES/IDENTIFIER", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-1333", + "lang": "en", + "description": "CWE-1333: Inefficient Regular Expression Complexity", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-6655-6qjp-jx7x", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-6655-6qjp-jx7x" + }, + { + "name": "https://github.com/facelessuser/soupsieve/pull/300", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/pull/300" + }, + { + "name": "https://github.com/facelessuser/soupsieve/commit/dbfa2854ff31a863326bd6660d4e55c6f068db9e", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/commit/dbfa2854ff31a863326bd6660d4e55c6f068db9e" + }, + { + "name": "https://github.com/facelessuser/soupsieve/releases/tag/3.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/releases/tag/3.0" + } + ], + "affected": [ + { + "vendor": "facelessuser", + "product": "soupsieve", + "versions": [ + { + "version": "< 3.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-12T16:57:01.566Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 3.0, the CSS_ESCAPES and IDENTIFIER regular-expression subpatterns can backtrack exponentially on runs of ambiguous digit escapes in an attribute-name or tag position of an otherwise valid selector. The failure occurs during selector compilation through soupsieve.compile() or Beautiful Soup select() before SELECTOR_LIMIT is applied, so an application that accepts untrusted selector strings can have a worker stalled by a short input. This issue is fixed in version 3.0." + } + ], + "source": { + "advisory": "GHSA-6655-6qjp-jx7x", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126192.json b/data/2026/126xxx/CVE-2026-126192.json new file mode 100644 index 0000000000..6f872c6ef1 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126192.json @@ -0,0 +1,118 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126192", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-10T20:07:44.957Z", + "datePublished": "2026-11-12T17:09:14.205Z", + "dateUpdated": "2026-11-12T17:09:14.205Z" + }, + "containers": { + "cna": { + "title": "Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-400", + "lang": "en", + "description": "CWE-400: Uncontrolled Resource Consumption", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-407", + "lang": "en", + "description": "CWE-407: Inefficient Algorithmic Complexity", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", + "version": "4.0" + } + } + ], + "references": [ + { + "name": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-4j63-6c4x-wfg4", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-4j63-6c4x-wfg4" + }, + { + "name": "https://github.com/facelessuser/soupsieve/pull/304", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/pull/304" + }, + { + "name": "https://github.com/facelessuser/soupsieve/commit/ffb88cca745c591224f74a8e86414a85e8f35fc0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/commit/ffb88cca745c591224f74a8e86414a85e8f35fc0" + }, + { + "name": "https://github.com/facelessuser/soupsieve/releases/tag/2.10", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/releases/tag/2.10" + } + ], + "affected": [ + { + "vendor": "facelessuser", + "product": "soupsieve", + "versions": [ + { + "version": "< 2.10", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-12T17:09:14.205Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has() repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing quadratic work on attacker-controlled HTML. Applications that evaluate a fixed selector such as div:has(a ~ b) over untrusted markup can have a worker occupied for minutes by a small document, while the adjacent sibling form and trusted-only document processing are not affected in the same way. This issue is fixed in version 2.10." + } + ], + "source": { + "advisory": "GHSA-4j63-6c4x-wfg4", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126193.json b/data/2026/126xxx/CVE-2026-126193.json new file mode 100644 index 0000000000..de3ea9d7a7 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126193.json @@ -0,0 +1,105 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126193", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-10T20:07:44.957Z", + "datePublished": "2026-11-12T17:12:02.083Z", + "dateUpdated": "2026-11-12T17:12:02.083Z" + }, + "containers": { + "cna": { + "title": "Soup Sieve: Uncontrolled recursion in Soup Sieve CSS parser lets nested pseudo-class selectors exhaust the Python call stack", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-674", + "lang": "en", + "description": "CWE-674: Uncontrolled Recursion", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "LOW", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-7g44-g9rc-x53w", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/facelessuser/soupsieve/security/advisories/GHSA-7g44-g9rc-x53w" + }, + { + "name": "https://github.com/facelessuser/soupsieve/pull/306", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/pull/306" + }, + { + "name": "https://github.com/facelessuser/soupsieve/commit/52de12f157a373614ad0f486d434551c5a4378ee", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/commit/52de12f157a373614ad0f486d434551c5a4378ee" + }, + { + "name": "https://github.com/facelessuser/soupsieve/releases/tag/3.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/facelessuser/soupsieve/releases/tag/3.0" + } + ], + "affected": [ + { + "vendor": "facelessuser", + "product": "soupsieve", + "versions": [ + { + "version": ">= 0.4, < 3.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-12T17:12:02.083Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "Soup Sieve is a CSS selector library for Beautiful Soup. From 0.4 until 3.0, deeply nested CSS pseudo-class selectors can cause recursive parsing to exceed Python’s recursion limit and raise  RecursionError . Applications accepting untrusted selectors may experience failure of the affected request or task if the exception is not handled. The demonstrated behavior is recoverable and does not establish an interpreter crash or persistent service-wide denial of service. This vulnerability is fixed in version 3.0." + } + ], + "source": { + "advisory": "GHSA-7g44-g9rc-x53w", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126835.json b/data/2026/126xxx/CVE-2026-126835.json new file mode 100644 index 0000000000..6796d94046 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126835.json @@ -0,0 +1,132 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126835", + "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb", + "state": "PUBLISHED", + "assignerShortName": "mongodb", + "dateReserved": "2026-11-11T21:29:16.291Z", + "datePublished": "2026-11-12T17:06:05.064Z", + "dateUpdated": "2026-11-12T17:06:05.064Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb", + "shortName": "mongodb", + "dateUpdated": "2026-11-12T17:06:05.064Z" + }, + "title": "[Node.js Driver] OIDC ENVIRONMENT confusion bypasses ALLOWED_HOSTS and leaks human-callback bearer tokens", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-923", + "description": "CWE-923: Improper Restriction of Communication Channel to Intended Endpoints", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "MongoDB", + "product": "Node.js Driver", + "versions": [ + { + "status": "affected", + "version": ">= 6.7.0", + "lessThan": "7.9.0", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The MongoDB Node.js driver does not consistently enforce its permitted-host restriction during OIDC authentication. A bearer token produced by the embedding application's own login callback may therefore be transmitted to a host outside the configured set of permitted hosts, which may result in unintended disclosure of that credential. No database account is required; the party supplying the connection configuration needs only to influence the settings the application passes to the driver.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "The MongoDB Node.js driver does not consistently enforce its permitted-host restriction during OIDC authentication. A bearer token produced by the embedding application's own login callback may therefore be transmitted to a host outside the configured set of permitted hosts, which may result in unintended disclosure of that credential. No database account is required; the party supplying the connection configuration needs only to influence the settings the application passes to the driver." + } + ] + } + ], + "references": [ + { + "url": "https://github.com/mongodb/node-mongodb-native/releases/tag/v7.9.0" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" + } + }, + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126837.json b/data/2026/126xxx/CVE-2026-126837.json new file mode 100644 index 0000000000..b6925b89b8 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126837.json @@ -0,0 +1,132 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126837", + "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb", + "state": "PUBLISHED", + "assignerShortName": "mongodb", + "dateReserved": "2026-11-11T21:48:08.923Z", + "datePublished": "2026-11-12T17:00:11.830Z", + "dateUpdated": "2026-11-12T17:00:11.830Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb", + "shortName": "mongodb", + "dateUpdated": "2026-11-12T17:00:11.830Z" + }, + "title": "Attacker able to redirect a client's database traffic to a host they control via special characters in an SRV target, bypassing the SRV parent-domain guard", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-88", + "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "MongoDB", + "product": "Node.js Driver", + "versions": [ + { + "status": "affected", + "version": "3.3.3", + "lessThan": "7.8.0", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A validation flaw in the DNS SRV host discovery of the MongoDB Node.js driver may cause the driver to connect to a host outside the expected domain. For a mongodb+srv:// connection string, the driver checks each host name in the DNS SRV response against the domain of the connection string. The driver then builds the connection address from the original name, in which certain characters end the host name early. An unauthenticated party who can forge or change the DNS SRV response may redirect the connection to a host of their choice. TLS does not prevent this, because the driver verifies the server certificate against the redirected host name. This may result in unintended disclosure of application data and authentication credentials, and in altered query results. Applications that use mongodb:// connection strings are not affected.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "A validation flaw in the DNS SRV host discovery of the MongoDB Node.js driver may cause the driver to connect to a host outside the expected domain. For a mongodb+srv:// connection string, the driver checks each host name in the DNS SRV response against the domain of the connection string. The driver then builds the connection address from the original name, in which certain characters end the host name early. An unauthenticated party who can forge or change the DNS SRV response may redirect the connection to a host of their choice. TLS does not prevent this, because the driver verifies the server certificate against the redirected host name. This may result in unintended disclosure of application data and authentication credentials, and in altered query results. Applications that use mongodb:// connection strings are not affected." + } + ] + } + ], + "references": [ + { + "url": "https://jira.mongodb.org/browse/NODE-7830" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "CRITICAL", + "baseScore": 9.1, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" + } + }, + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE", + "baseSeverity": "HIGH", + "baseScore": 7.4, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126994.json b/data/2026/126xxx/CVE-2026-126994.json index 3fd7402d4a..213ce9c9ba 100644 --- a/data/2026/126xxx/CVE-2026-126994.json +++ b/data/2026/126xxx/CVE-2026-126994.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-12T07:57:21.265Z", "datePublished": "2026-11-12T12:30:27.079Z", - "dateUpdated": "2026-11-12T12:30:27.079Z" + "dateUpdated": "2026-11-12T17:17:55.217Z" }, "containers": { "cna": { @@ -194,6 +194,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:57:29.399155Z", + "id": "CVE-2026-126994", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:17:55.217Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126998.json b/data/2026/126xxx/CVE-2026-126998.json index 7b0ff9ebf3..e4ee997f01 100644 --- a/data/2026/126xxx/CVE-2026-126998.json +++ b/data/2026/126xxx/CVE-2026-126998.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-12T08:04:31.383Z", "datePublished": "2026-11-12T14:45:16.200Z", - "dateUpdated": "2026-11-12T14:45:16.200Z" + "dateUpdated": "2026-11-12T17:17:39.139Z" }, "containers": { "cna": { @@ -177,6 +177,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:57:32.059850Z", + "id": "CVE-2026-126998", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:17:39.139Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127029.json b/data/2026/127xxx/CVE-2026-127029.json new file mode 100644 index 0000000000..c2977a8a82 --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127029.json @@ -0,0 +1,173 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127029", + "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", + "state": "PUBLISHED", + "assignerShortName": "redhat", + "dateReserved": "2026-11-12T10:45:33.541Z", + "datePublished": "2026-11-12T16:21:48.973Z", + "dateUpdated": "2026-11-12T16:21:48.973Z" + }, + "containers": { + "cna": { + "title": "Freeradius: stack-based buffer overflow via unbounded eap-sim identity length", + "metrics": [ + { + "other": { + "content": { + "value": "Important", + "namespace": "https://access.redhat.com/security/updates/classification/" + }, + "type": "Red Hat severity rating" + } + }, + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "version": "3.1" + }, + "format": "CVSS" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A flaw was found in freeradius's Extensible Authentication Protocol Method for Subscriber Identity Module (EAP-SIM) module. When handling authentication requests, the server copies a client-supplied identity into an internal structure without properly checking its length against a fixed-size buffer. An unauthenticated remote attacker can exploit this issue by sending specially crafted EAP-SIM messages, triggering a stack buffer overflow that crashes the service and results in a Denial of Service (DoS)." + } + ], + "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "freeradius", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:enterprise_linux:10" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 6", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "freeradius", + "defaultStatus": "unknown", + "cpes": [ + "cpe:/o:redhat:rhel_els:6" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 7", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "freeradius", + "defaultStatus": "affected", + "cpes": [ + "cpe:/o:redhat:rhel_els:7" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "freeradius:3.0/freeradius", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:enterprise_linux:8" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 9", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "freeradius", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:enterprise_linux:9" + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2026-127029", + "tags": [ + "vdb-entry", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2572339", + "name": "RHBZ#2572339", + "tags": [ + "issue-tracking", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://github.com/FreeRADIUS/freeradius-server/commit/064567a08f3b9d9b4863fab6060fafe296ac7de9" + }, + { + "url": "https://github.com/FreeRADIUS/freeradius-server/commit/e415f818dcdf91626e5e7314b3a4f819ab11f572" + } + ], + "datePublic": "2026-11-12T12:10:20.004Z", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-787", + "description": "Out-of-bounds Write", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "x_redhatCweChain": "CWE-787: Out-of-bounds Write", + "workarounds": [ + { + "lang": "en", + "value": "Disable the EAP-SIM submodule in the FreeRADIUS configuration if SIM-based authentication is not required:\n\n1. Edit `/etc/raddb/mods-available/eap` (or `/etc/raddb/mods-enabled/eap`) and comment out or remove the `sim` configuration block within the `eap` module definition:\n\n```\n# sim {\n# }\n```\n\n2. Restart the FreeRADIUS service to apply the changes:\n\n```\nsystemctl restart radiusd\n```\n\nWarning: Restarting or reloading the FreeRADIUS service will temporarily interrupt active RADIUS authentication requests. Clients relying on EAP-SIM authentication will no longer be able to authenticate.\n\nAdditionally, restrict RADIUS UDP traffic (ports 1812 and 1813) to trusted Network Access Server (NAS) IP addresses using firewall rules to limit exposure to untrusted networks." + } + ], + "timeline": [ + { + "lang": "en", + "time": "2026-11-03T10:16:22.000Z", + "value": "Reported to Red Hat." + }, + { + "lang": "en", + "time": "2026-11-12T12:10:20.004Z", + "value": "Made public." + } + ], + "credits": [ + { + "lang": "en", + "value": "Red Hat would like to thank s4cr00t (Alipay Security Team) for reporting this issue. Upstream acknowledges Glen Saunders as the original reporter." + } + ], + "providerMetadata": { + "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", + "shortName": "redhat", + "dateUpdated": "2026-11-12T16:21:48.973Z" + }, + "x_generator": { + "engine": "cvelib 1.8.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127030.json b/data/2026/127xxx/CVE-2026-127030.json new file mode 100644 index 0000000000..7ddfc5053c --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127030.json @@ -0,0 +1,173 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127030", + "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", + "state": "PUBLISHED", + "assignerShortName": "redhat", + "dateReserved": "2026-11-12T10:45:33.541Z", + "datePublished": "2026-11-12T16:21:52.568Z", + "dateUpdated": "2026-11-12T16:21:52.568Z" + }, + "containers": { + "cna": { + "title": "Freeradius: stack buffer overflow via unchecked eap-fast sessionticket length", + "metrics": [ + { + "other": { + "content": { + "value": "Important", + "namespace": "https://access.redhat.com/security/updates/classification/" + }, + "type": "Red Hat severity rating" + } + }, + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "version": "3.1" + }, + "format": "CVSS" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A flaw was found in freeradius. An improper length validation in the EAP-FAST module allows a stack-based buffer overflow during session ticket processing. A remote, unauthenticated attacker can exploit this flaw by sending a specially crafted handshake request, causing the server process to crash and resulting in a Denial of Service (DoS)." + } + ], + "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "freeradius", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:enterprise_linux:10" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 6", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "freeradius", + "defaultStatus": "unaffected", + "cpes": [ + "cpe:/o:redhat:rhel_els:6" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 7", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "freeradius", + "defaultStatus": "affected", + "cpes": [ + "cpe:/o:redhat:rhel_els:7" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "freeradius:3.0/freeradius", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:enterprise_linux:8" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 9", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "freeradius", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:enterprise_linux:9" + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2026-127030", + "tags": [ + "vdb-entry", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2572340", + "name": "RHBZ#2572340", + "tags": [ + "issue-tracking", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://github.com/FreeRADIUS/freeradius-server/commit/064567a08f3b9d9b4863fab6060fafe296ac7de9" + }, + { + "url": "https://github.com/FreeRADIUS/freeradius-server/commit/a5d09dad528d7a3a3c4c01158716ab85a12e09ef" + } + ], + "datePublic": "2026-11-12T12:12:02.163Z", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-787", + "description": "Out-of-bounds Write", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "x_redhatCweChain": "CWE-787: Out-of-bounds Write", + "workarounds": [ + { + "lang": "en", + "value": "Disable the EAP-FAST submodule in the FreeRADIUS configuration, or restrict incoming RADIUS traffic to trusted network access points.\n\n1. Disable EAP-FAST:\nIn `/etc/raddb/mods-available/eap` (or `/etc/raddb/eap.conf`), comment out the `fast` section within the `eap` configuration block and verify that `default_eap_type` is not set to `fast`.\n\n2. Apply configuration changes:\n```\nsystemctl restart radiusd\n```\n\n3. Limit network exposure:\nRestrict UDP port 1812 to authorized Network Access Server (NAS) clients using firewalld:\n```\nfirewall-cmd --permanent --zone=internal --add-source=\nfirewall-cmd --permanent --zone=internal --add-port=1812/udp\nfirewall-cmd --reload\n```\n\nCaveats:\nDisabling EAP-FAST prevents authentication for any network clients that rely exclusively on EAP-FAST. Restricting firewall rules will block traffic from unlisted authenticator sources.\n\nWarning:\nRestarting or reloading the radiusd service will temporarily disrupt active RADIUS authentication processing." + } + ], + "timeline": [ + { + "lang": "en", + "time": "2026-11-03T10:16:22.000Z", + "value": "Reported to Red Hat." + }, + { + "lang": "en", + "time": "2026-11-12T12:12:02.163Z", + "value": "Made public." + } + ], + "credits": [ + { + "lang": "en", + "value": "Red Hat would like to thank s4cr00t (Alipay Security Team) for reporting this issue. Upstream acknowledges Ada Logics and TristanInSec@gmail.com as the original reporters." + } + ], + "providerMetadata": { + "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", + "shortName": "redhat", + "dateUpdated": "2026-11-12T16:21:52.568Z" + }, + "x_generator": { + "engine": "cvelib 1.8.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127109.json b/data/2026/127xxx/CVE-2026-127109.json index bfdfb43dde..6708221aa7 100644 --- a/data/2026/127xxx/CVE-2026-127109.json +++ b/data/2026/127xxx/CVE-2026-127109.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-12T15:07:38.409Z", "datePublished": "2026-11-12T15:08:53.202Z", - "dateUpdated": "2026-11-12T15:08:53.202Z" + "dateUpdated": "2026-11-12T17:05:17.829Z" }, "containers": { "cna": { @@ -61,6 +61,21 @@ "shortName": "certcc", "dateUpdated": "2026-11-12T15:08:53.202Z" } - } + }, + "adp": [ + { + "title": "CVE Program Container", + "references": [ + { + "url": "https://www.kb.cert.org/vuls/id/685399" + } + ], + "providerMetadata": { + "orgId": "af854a3a-2127-422b-91ae-364da2661108", + "shortName": "CVE", + "dateUpdated": "2026-11-12T17:05:17.829Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127121.json b/data/2026/127xxx/CVE-2026-127121.json index d1717eb515..b2e7c2e43c 100644 --- a/data/2026/127xxx/CVE-2026-127121.json +++ b/data/2026/127xxx/CVE-2026-127121.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-12T15:30:07.716Z", "datePublished": "2026-11-12T15:55:12.349Z", - "dateUpdated": "2026-11-12T15:55:12.349Z" + "dateUpdated": "2026-11-12T17:17:31.603Z" }, "containers": { "cna": { @@ -142,6 +142,40 @@ "x_generator": { "engine": "vulncheck" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:38:22.620203Z", + "id": "CVE-2026-127121", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:17:31.603Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127141.json b/data/2026/127xxx/CVE-2026-127141.json index b0bc7e001c..c603bcbe08 100644 --- a/data/2026/127xxx/CVE-2026-127141.json +++ b/data/2026/127xxx/CVE-2026-127141.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-12T15:47:15.872Z", "datePublished": "2026-11-12T15:59:58.626Z", - "dateUpdated": "2026-11-12T15:59:58.626Z" + "dateUpdated": "2026-11-12T17:17:20.710Z" }, "containers": { "cna": { @@ -142,6 +142,40 @@ "x_generator": { "engine": "vulncheck" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:27:39.777993Z", + "id": "CVE-2026-127141", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:17:20.710Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127202.json b/data/2026/127xxx/CVE-2026-127202.json new file mode 100644 index 0000000000..0d24934d9d --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127202.json @@ -0,0 +1,162 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127202", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-12T16:30:10.902Z", + "datePublished": "2026-11-12T16:37:02.081Z", + "dateUpdated": "2026-11-12T16:37:02.081Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-12T16:37:02.081Z" + }, + "title": "MLflow < 3.18.0 Path Traversal via model_id in log_outputs API", + "descriptions": [ + { + "lang": "en", + "value": "MLflow before 3.18.0 using the FileStore backend contains a path traversal vulnerability that allows unauthenticated remote attackers to write files outside the intended run directory by supplying a malicious model_id parameter to the log outputs API. Attackers can exploit the unvalidated model_id containing ../ sequences via the POST /api/3.0/mlflow/runs/outputs endpoint to create directories and write a meta.yaml file at arbitrary filesystem locations, limited only by the server account's permissions. FileStore was the default backend before 3.7.0 and is opt-in afterward through MLFLOW_ALLOW_FILE_STORE." + } + ], + "tags": [ + "x_open-source" + ], + "datePublic": "2026-10-26T00:00:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "cweId": "CWE-22", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "defaultStatus": "unaffected", + "vendor": "mlflow", + "product": "mlflow", + "packageURL": "pkg:pypi/mlflow", + "repo": "https://github.com/mlflow/mlflow", + "versions": [ + { + "status": "affected", + "version": "0", + "versionType": "semver", + "lessThan": "3.18.0" + } + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" + } + }, + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + } + ], + "references": [ + { + "url": "https://github.com/mlflow/mlflow/releases/tag/v3.18.0", + "name": "Release Notes", + "tags": [ + "release-notes" + ] + }, + { + "url": "https://github.com/mlflow/mlflow/pull/27131", + "name": "Pull Request", + "tags": [ + "issue-tracking", + "patch" + ] + }, + { + "url": "https://github.com/mlflow/mlflow/commit/ab5fc795eedc22348253cf687818cf2a16c15282", + "name": "Patch Commit", + "tags": [ + "patch", + "issue-tracking" + ] + }, + { + "url": "https://www.vulncheck.com/advisories/mlflow-path-traversal-via-model-id-in-log-outputs-api", + "name": "VulnCheck Advisory: MLflow < 3.18.0 Path Traversal via model_id in log_outputs API", + "tags": [ + "third-party-advisory" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Florian Kabashi", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck" + } + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127203.json b/data/2026/127xxx/CVE-2026-127203.json new file mode 100644 index 0000000000..cba9eeb024 --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127203.json @@ -0,0 +1,148 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127203", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-12T16:30:10.902Z", + "datePublished": "2026-11-12T16:42:40.069Z", + "dateUpdated": "2026-11-12T16:42:40.069Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-12T16:42:40.069Z" + }, + "title": "AppFlowy Cloud 0.9.64 Stored XSS via Blob Upload Content-Type", + "descriptions": [ + { + "lang": "en", + "value": "AppFlowy Cloud through 0.9.64 contains a stored cross-site scripting vulnerability that allows authenticated workspace members to upload blobs with unvalidated Content-Type values that are later served inline without a Content-Disposition header or authentication on the retrieval route. Attackers can upload a text/html or image/svg+xml blob via put_blob_handler, which is then rendered as an active same-origin document through the unauthenticated get_blob_handler endpoint and cached immutably for one year, enabling persistent script execution against any visitor who accesses the URL." + } + ], + "tags": [ + "x_open-source", + "unsupported-when-assigned" + ], + "datePublic": "2026-11-09T00:00:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "cweId": "CWE-79", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "defaultStatus": "unaffected", + "vendor": "AppFlowy-IO", + "product": "AppFlowy-Cloud", + "packageURL": "pkg:github/AppFlowy-IO/AppFlowy-Cloud", + "repo": "https://github.com/AppFlowy-IO/AppFlowy-Cloud", + "versions": [ + { + "status": "affected", + "version": "0", + "versionType": "semver", + "lessThanOrEqual": "0.9.64" + } + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 5.1, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" + } + }, + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.4, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } + } + ], + "references": [ + { + "url": "https://gist.github.com/mtholmquist/9b9683104fc3b5d78a488c06a6674e5c", + "name": "Researcher Disclosure", + "tags": [ + "technical-description", + "exploit" + ] + }, + { + "url": "https://www.vulncheck.com/advisories/appflowy-cloud-stored-xss-via-blob-upload-content-type", + "name": "VulnCheck Advisory: AppFlowy Cloud 0.9.64 Stored XSS via Blob Upload Content-Type", + "tags": [ + "third-party-advisory" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Michael Holmquist (@mtholmquist), Hasp Labs.", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck" + } + } + } +} \ No newline at end of file diff --git a/data/2026/13xxx/CVE-2026-13409.json b/data/2026/13xxx/CVE-2026-13409.json index f9e3c9461c..7ec335aaf4 100644 --- a/data/2026/13xxx/CVE-2026-13409.json +++ b/data/2026/13xxx/CVE-2026-13409.json @@ -8,7 +8,7 @@ "assignerShortName": "Axis", "dateReserved": "2026-06-26T09:31:55.373Z", "datePublished": "2026-11-10T05:15:29.566Z", - "dateUpdated": "2026-11-10T05:15:29.566Z" + "dateUpdated": "2026-11-12T17:10:18.024Z" }, "containers": { "cna": { @@ -121,6 +121,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:10:04.582284Z", + "id": "CVE-2026-13409", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:10:18.024Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/14xxx/CVE-2026-14542.json b/data/2026/14xxx/CVE-2026-14542.json index 19e49f507a..e7557e542d 100644 --- a/data/2026/14xxx/CVE-2026-14542.json +++ b/data/2026/14xxx/CVE-2026-14542.json @@ -8,7 +8,7 @@ "assignerShortName": "Axis", "dateReserved": "2026-07-03T06:01:00.873Z", "datePublished": "2026-11-10T05:17:45.674Z", - "dateUpdated": "2026-11-10T05:17:45.674Z" + "dateUpdated": "2026-11-12T17:11:16.083Z" }, "containers": { "cna": { @@ -115,6 +115,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:10:58.568541Z", + "id": "CVE-2026-14542", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:11:16.083Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/14xxx/CVE-2026-14543.json b/data/2026/14xxx/CVE-2026-14543.json index 3414ab1833..88811a0d5a 100644 --- a/data/2026/14xxx/CVE-2026-14543.json +++ b/data/2026/14xxx/CVE-2026-14543.json @@ -8,7 +8,7 @@ "assignerShortName": "Axis", "dateReserved": "2026-07-03T06:01:02.000Z", "datePublished": "2026-11-10T05:20:29.154Z", - "dateUpdated": "2026-11-10T05:20:29.154Z" + "dateUpdated": "2026-11-12T17:11:50.904Z" }, "containers": { "cna": { @@ -113,6 +113,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:11:36.936658Z", + "id": "CVE-2026-14543", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:11:50.904Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/16xxx/CVE-2026-16052.json b/data/2026/16xxx/CVE-2026-16052.json new file mode 100644 index 0000000000..b9632dc128 --- /dev/null +++ b/data/2026/16xxx/CVE-2026-16052.json @@ -0,0 +1,148 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-16052", + "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22", + "state": "PUBLISHED", + "assignerShortName": "PSF", + "dateReserved": "2026-07-17T10:34:29.475Z", + "datePublished": "2026-11-12T16:28:03.251Z", + "dateUpdated": "2026-11-12T16:28:03.251Z" + }, + "containers": { + "cna": { + "affected": [ + { + "defaultStatus": "unaffected", + "modules": [ + "http", + "http.cookies" + ], + "product": "CPython", + "repo": "https://github.com/python/cpython", + "vendor": "Python Software Foundation", + "versions": [ + { + "lessThan": "3.16.0", + "status": "affected", + "version": "0", + "versionType": "python" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "type": "reporter", + "value": "Qi Deng (https://github.com/ikow)" + }, + { + "lang": "en", + "type": "coordinator", + "value": "Stan Ulbrych (https://github.com/StanFromIreland)" + }, + { + "lang": "en", + "type": "remediation developer", + "value": "Brett Smith (https://github.com/brettcs)" + }, + { + "lang": "en", + "type": "remediation reviewer", + "value": "Seth Larson (https://github.com/sethmlarson)" + }, + { + "lang": "en", + "type": "remediation reviewer", + "value": "Victor Stinner (https://github.com/vstinner)" + }, + { + "lang": "en", + "type": "remediation reviewer", + "value": "Senthil Kumaran (https://github.com/orsenthil)" + } + ], + "descriptions": [ + { + "lang": "en", + "supportingMedia": [ + { + "type": "text/html", + "value": "The http.cookies.Morsel class allows separator semicolons in attribute\nvalues\nand includes them verbatim in all output formats. An attacker who can\ncontrol\nthese values could use this to relax the cookie's Domain or SameSite\nrestrictions." + } + ], + "value": "The http.cookies.Morsel class allows separator semicolons in attribute\nvalues\nand includes them verbatim in all output formats. An attacker who can\ncontrol\nthese values could use this to relax the cookie's Domain or SameSite\nrestrictions." + } + ], + "metrics": [ + { + "cvssV4_0": { + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "attackVector": "NETWORK", + "baseScore": 2.3, + "baseSeverity": "LOW", + "exploitMaturity": "NOT_DEFINED", + "privilegesRequired": "NONE", + "providerUrgency": "NOT_DEFINED", + "subAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "userInteraction": "PASSIVE", + "valueDensity": "NOT_DEFINED", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", + "version": "4.0", + "vulnAvailabilityImpact": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnerabilityResponseEffort": "NOT_DEFINED" + }, + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ] + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-74", + "description": "CWE-74", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "providerMetadata": { + "orgId": "28c92f92-d60d-412d-b760-e73465c3df22", + "shortName": "PSF", + "dateUpdated": "2026-11-12T16:28:03.251Z" + }, + "references": [ + { + "url": "https://github.com/python/cpython/pull/161711" + }, + { + "url": "https://github.com/python/cpython/issues/161707" + }, + { + "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/IZL4QUFV7PKGT2JYSU2DCBMLTWYJDGKZ/" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "title": "Cookie Attribute Injection via Unescaped Semicolons in http.cookies.Morsel" + } + } +} \ No newline at end of file diff --git a/data/2026/16xxx/CVE-2026-16283.json b/data/2026/16xxx/CVE-2026-16283.json index d585ba9972..89a5aadbca 100644 --- a/data/2026/16xxx/CVE-2026-16283.json +++ b/data/2026/16xxx/CVE-2026-16283.json @@ -8,7 +8,7 @@ "assignerShortName": "TR-CERT", "dateReserved": "2026-07-20T11:05:16.378Z", "datePublished": "2026-11-09T13:29:16.473Z", - "dateUpdated": "2026-11-09T13:29:16.473Z" + "dateUpdated": "2026-11-12T16:19:43.611Z" }, "containers": { "cna": { @@ -120,6 +120,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:19:28.942488Z", + "id": "CVE-2026-16283", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:19:43.611Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17278.json b/data/2026/17xxx/CVE-2026-17278.json index f61c2319af..eea58446c2 100644 --- a/data/2026/17xxx/CVE-2026-17278.json +++ b/data/2026/17xxx/CVE-2026-17278.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-24T23:57:42.335Z", "datePublished": "2026-11-07T04:32:29.843Z", - "dateUpdated": "2026-11-07T04:32:29.843Z" + "dateUpdated": "2026-11-12T16:38:45.331Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:38:37.098471Z", + "id": "CVE-2026-17278", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:38:45.331Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17309.json b/data/2026/17xxx/CVE-2026-17309.json index fea8bc9297..bcf0904786 100644 --- a/data/2026/17xxx/CVE-2026-17309.json +++ b/data/2026/17xxx/CVE-2026-17309.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T01:22:23.445Z", "datePublished": "2026-11-07T04:33:01.109Z", - "dateUpdated": "2026-11-07T04:33:01.109Z" + "dateUpdated": "2026-11-12T16:35:47.324Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:35:38.339614Z", + "id": "CVE-2026-17309", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:35:47.324Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17315.json b/data/2026/17xxx/CVE-2026-17315.json index 80788353bf..e74b9251e5 100644 --- a/data/2026/17xxx/CVE-2026-17315.json +++ b/data/2026/17xxx/CVE-2026-17315.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T01:37:55.839Z", "datePublished": "2026-11-07T04:33:07.476Z", - "dateUpdated": "2026-11-07T04:33:07.476Z" + "dateUpdated": "2026-11-12T16:32:48.187Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:32:40.446987Z", + "id": "CVE-2026-17315", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:32:48.187Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17329.json b/data/2026/17xxx/CVE-2026-17329.json index 176ae427b3..ef1c7087ff 100644 --- a/data/2026/17xxx/CVE-2026-17329.json +++ b/data/2026/17xxx/CVE-2026-17329.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T02:14:21.963Z", "datePublished": "2026-11-07T04:33:21.858Z", - "dateUpdated": "2026-11-07T04:33:21.858Z" + "dateUpdated": "2026-11-12T16:34:01.332Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:33:52.140284Z", + "id": "CVE-2026-17329", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:34:01.332Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17360.json b/data/2026/17xxx/CVE-2026-17360.json index ec7388a61b..9051014d76 100644 --- a/data/2026/17xxx/CVE-2026-17360.json +++ b/data/2026/17xxx/CVE-2026-17360.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T03:14:45.452Z", "datePublished": "2026-11-07T04:33:47.951Z", - "dateUpdated": "2026-11-07T04:33:47.951Z" + "dateUpdated": "2026-11-12T16:39:54.676Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:39:45.786906Z", + "id": "CVE-2026-17360", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:39:54.676Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/18xxx/CVE-2026-18838.json b/data/2026/18xxx/CVE-2026-18838.json index 6b48c85b5c..95621ffab6 100644 --- a/data/2026/18xxx/CVE-2026-18838.json +++ b/data/2026/18xxx/CVE-2026-18838.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-08-04T14:38:56.132Z", "datePublished": "2026-11-07T04:34:40.256Z", - "dateUpdated": "2026-11-07T04:34:40.256Z" + "dateUpdated": "2026-11-12T16:37:22.259Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:37:11.301658Z", + "id": "CVE-2026-18838", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:37:22.259Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/19xxx/CVE-2026-19552.json b/data/2026/19xxx/CVE-2026-19552.json index a11ac57bc3..07720c6359 100644 --- a/data/2026/19xxx/CVE-2026-19552.json +++ b/data/2026/19xxx/CVE-2026-19552.json @@ -8,7 +8,7 @@ "assignerShortName": "PSF", "dateReserved": "2026-08-11T15:22:01.993Z", "datePublished": "2026-11-09T14:15:31.799Z", - "dateUpdated": "2026-11-11T00:24:21.738Z" + "dateUpdated": "2026-11-12T16:30:53.287Z" }, "containers": { "cna": { @@ -172,6 +172,50 @@ "shortName": "CVE", "dateUpdated": "2026-11-09T21:04:58.458Z" } + }, + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-295", + "lang": "en", + "description": "CWE-295 Improper Certificate Validation" + } + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:29:34.238521Z", + "id": "CVE-2026-19552", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:30:53.287Z" + } } ] } diff --git a/data/2026/62xxx/CVE-2026-62107.json b/data/2026/62xxx/CVE-2026-62107.json index 15ab0c35ae..c60515d65a 100644 --- a/data/2026/62xxx/CVE-2026-62107.json +++ b/data/2026/62xxx/CVE-2026-62107.json @@ -8,52 +8,43 @@ "assignerShortName": "Patchstack", "dateReserved": "2026-07-13T06:15:10.221Z", "datePublished": "2026-09-11T18:12:05.129Z", - "dateUpdated": "2026-09-11T20:19:11.606Z" + "dateUpdated": "2026-11-12T16:41:54.550Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", - "dateUpdated": "2026-09-11T18:12:05.129Z" + "dateUpdated": "2026-11-12T16:41:54.550Z" }, "title": "WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability", - "problemTypes": [ + "datePublic": "2026-09-11T09:24:36.000Z", + "descriptions": [ { - "descriptions": [ + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in ThemeGrill Masteriyo - LMS learning-management-system allows Object Injection.This issue affects Masteriyo - LMS: from n/a through 3.4.0.", + "supportingMedia": [ { - "lang": "en", - "cweId": "CWE-502", - "description": "CWE-502 Deserialization of Untrusted Data", - "type": "CWE" - } - ] - } - ], - "impacts": [ - { - "capecId": "CAPEC-586", - "descriptions": [ - { - "lang": "en", - "value": "CAPEC-586 Object Injection" + "type": "text/html", + "base64": false, + "value": "Deserialization of Untrusted Data vulnerability in ThemeGrill Masteriyo - LMS learning-management-system allows Object Injection.

This issue affects Masteriyo - LMS: from n/a through 3.4.0.

" } ] } ], "affected": [ { - "vendor": "masteriyo", + "vendor": "ThemeGrill", + "product": "Masteriyo - LMS", + "packageName": "learning-management-system", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", - "packageName": "learning-management-system", - "product": "Masteriyo - LMS", "versions": [ { - "lessThanOrEqual": "3.4.0", - "status": "affected", - "version": "n/a", + "version": "0", "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "3.4.0", "changes": [ { "at": "3.4.1", @@ -64,25 +55,19 @@ ] } ], - "descriptions": [ - { - "lang": "en", - "supportingMedia": [ - { - "base64": false, - "type": "text/html", - "value": "Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions." - } - ], - "value": "Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions." - } - ], "references": [ { + "url": "https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-masteriyo-lms-plugin-3-4-0-php-object-injection-vulnerability?_s_id=cve", "tags": [ "vdb-entry" - ], - "url": "https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-masteriyo-lms-plugin-3-4-0-php-object-injection-vulnerability?_s_id=cve" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "20kilograma | Patchstack Bug Bounty Program", + "type": "finder" } ], "metrics": [ @@ -95,6 +80,10 @@ } ], "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", @@ -102,41 +91,50 @@ "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", - "availabilityImpact": "HIGH", - "version": "3.1", - "baseSeverity": "HIGH", - "baseScore": 8.8, - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + "availabilityImpact": "HIGH" } } ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-502", + "description": "Deserialization of Untrusted Data", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-586", + "descriptions": [ + { + "lang": "en", + "value": "Object Injection" + } + ] + } + ], "solutions": [ { "lang": "en", + "value": "Update the WordPress Masteriyo - LMS plugin to the latest available version (at least 3.4.1).", "supportingMedia": [ { - "base64": false, "type": "text/html", - "value": "Update the WordPress Masteriyo - LMS Plugin to the latest available version (at least 3.4.1)." + "base64": false, + "value": "Update the WordPress Masteriyo - LMS plugin to the latest available version (at least 3.4.1)." } - ], - "value": "Update the WordPress Masteriyo - LMS Plugin to the latest available version (at least 3.4.1)." + ] } ], - "credits": [ - { - "lang": "en", - "type": "finder", - "user": "00000000-0000-4000-9000-000000000000", - "value": "20kilograma | Patchstack Bug Bounty Program" - } - ], - "source": { - "discovery": "EXTERNAL" - }, - "x_generator": { - "engine": "Vulnogram 0.2.0" - } + "tags": [ + "x_known-exploited-vulnerability", + "x_open-source" + ] }, "adp": [ { diff --git a/data/2026/63xxx/CVE-2026-63282.json b/data/2026/63xxx/CVE-2026-63282.json index 3a1cac3966..814b12b7e7 100644 --- a/data/2026/63xxx/CVE-2026-63282.json +++ b/data/2026/63xxx/CVE-2026-63282.json @@ -8,7 +8,7 @@ "assignerShortName": "Axis", "dateReserved": "2026-07-16T08:28:41.292Z", "datePublished": "2026-11-10T05:23:30.194Z", - "dateUpdated": "2026-11-10T05:23:30.194Z" + "dateUpdated": "2026-11-12T17:13:04.418Z" }, "containers": { "cna": { @@ -133,6 +133,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:12:39.343908Z", + "id": "CVE-2026-63282", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:13:04.418Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/63xxx/CVE-2026-63288.json b/data/2026/63xxx/CVE-2026-63288.json index 211f8ba6e5..0638c91426 100644 --- a/data/2026/63xxx/CVE-2026-63288.json +++ b/data/2026/63xxx/CVE-2026-63288.json @@ -8,7 +8,7 @@ "assignerShortName": "Axis", "dateReserved": "2026-07-16T08:28:41.293Z", "datePublished": "2026-11-10T05:32:06.255Z", - "dateUpdated": "2026-11-10T05:32:06.255Z" + "dateUpdated": "2026-11-12T17:13:55.816Z" }, "containers": { "cna": { @@ -149,6 +149,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:13:39.276728Z", + "id": "CVE-2026-63288", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:13:55.816Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/76xxx/CVE-2026-76970.json b/data/2026/76xxx/CVE-2026-76970.json index b1b046b1e4..62bdc9d4c7 100644 --- a/data/2026/76xxx/CVE-2026-76970.json +++ b/data/2026/76xxx/CVE-2026-76970.json @@ -8,7 +8,7 @@ "assignerShortName": "sap", "dateReserved": "2026-08-20T05:33:36.764Z", "datePublished": "2026-11-10T00:18:08.996Z", - "dateUpdated": "2026-11-10T00:18:08.996Z" + "dateUpdated": "2026-11-12T17:07:57.840Z" }, "containers": { "cna": { @@ -151,6 +151,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:07:44.672927Z", + "id": "CVE-2026-76970", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:07:57.840Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/76xxx/CVE-2026-76973.json b/data/2026/76xxx/CVE-2026-76973.json index 9f5f56e39f..83c8c3f52d 100644 --- a/data/2026/76xxx/CVE-2026-76973.json +++ b/data/2026/76xxx/CVE-2026-76973.json @@ -8,7 +8,7 @@ "assignerShortName": "sap", "dateReserved": "2026-08-20T05:33:36.764Z", "datePublished": "2026-11-10T00:18:25.840Z", - "dateUpdated": "2026-11-10T00:18:25.840Z" + "dateUpdated": "2026-11-12T17:09:45.229Z" }, "containers": { "cna": { @@ -143,6 +143,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:09:29.422659Z", + "id": "CVE-2026-76973", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:09:45.229Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/82xxx/CVE-2026-82032.json b/data/2026/82xxx/CVE-2026-82032.json new file mode 100644 index 0000000000..568869239e --- /dev/null +++ b/data/2026/82xxx/CVE-2026-82032.json @@ -0,0 +1,28 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-82032", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "REJECTED", + "dateReserved": "2026-08-27T21:39:20.460Z", + "dateUpdated": "2026-11-12T16:44:20.347Z", + "dateRejected": "2026-11-12T16:44:20.347Z", + "assignerShortName": "VulnCheck" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-12T16:44:20.347Z" + }, + "rejectedReasons": [ + { + "lang": "en", + "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority." + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/82xxx/CVE-2026-82977.json b/data/2026/82xxx/CVE-2026-82977.json new file mode 100644 index 0000000000..ce5feb61f7 --- /dev/null +++ b/data/2026/82xxx/CVE-2026-82977.json @@ -0,0 +1,89 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-82977", + "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", + "state": "PUBLISHED", + "assignerShortName": "hackerone", + "dateReserved": "2026-08-31T15:00:00.543Z", + "datePublished": "2026-11-12T17:01:19.318Z", + "dateUpdated": "2026-11-12T17:01:19.318Z" + }, + "containers": { + "cna": { + "descriptions": [ + { + "lang": "en", + "value": "The Plesk GoAccess statistics integration in Plesk Obsidian for Linux, versions 18.0.77 to 18.0.81.7, 18.0.82 to 18.0.82.2, allows cross-subscription information disclosure." + } + ], + "affected": [ + { + "defaultStatus": "unaffected", + "vendor": "WebPros", + "product": "Plesk", + "versions": [ + { + "version": "18.0.77", + "status": "affected", + "lessThanOrEqual": "18.0.81.7", + "versionType": "semver" + }, + { + "version": "18.0.82", + "status": "affected", + "lessThanOrEqual": "18.0.82.2", + "versionType": "semver" + } + ] + } + ], + "references": [ + { + "url": "https://support.plesk.com/hc/en-us/articles/44915912496535-Vulnerability-CVE-2026-82977-Information-disclosure-in-Plesk-for-Linux-web-statistics" + } + ], + "metrics": [ + { + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:L/SA:L", + "baseScore": 8.4, + "baseSeverity": "HIGH" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "lang": "en", + "cweId": "CWE-732", + "description": "CWE-732 Incorrect Permission Assignment for Critical Resource" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Ady Elouej", + "type": "finder" + } + ], + "workarounds": [ + { + "lang": "en", + "value": "-" + } + ], + "providerMetadata": { + "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", + "shortName": "hackerone", + "dateUpdated": "2026-11-12T17:01:19.318Z" + } + } + } +} \ No newline at end of file diff --git a/data/2026/84xxx/CVE-2026-84410.json b/data/2026/84xxx/CVE-2026-84410.json index 8d448834d1..d1454b5c36 100644 --- a/data/2026/84xxx/CVE-2026-84410.json +++ b/data/2026/84xxx/CVE-2026-84410.json @@ -8,7 +8,7 @@ "assignerShortName": "canonical", "dateReserved": "2026-09-23T14:22:38.016Z", "datePublished": "2026-11-09T20:14:43.156Z", - "dateUpdated": "2026-11-09T20:14:43.156Z" + "dateUpdated": "2026-11-12T16:53:34.650Z" }, "containers": { "cna": { @@ -140,6 +140,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:52:43.114889Z", + "id": "CVE-2026-84410", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:53:34.650Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/86xxx/CVE-2026-86692.json b/data/2026/86xxx/CVE-2026-86692.json index e1e0b9426c..2a6023e27c 100644 --- a/data/2026/86xxx/CVE-2026-86692.json +++ b/data/2026/86xxx/CVE-2026-86692.json @@ -8,7 +8,7 @@ "assignerShortName": "canonical", "dateReserved": "2026-09-23T14:22:38.025Z", "datePublished": "2026-11-09T20:14:13.349Z", - "dateUpdated": "2026-11-09T20:14:13.349Z" + "dateUpdated": "2026-11-12T16:52:02.441Z" }, "containers": { "cna": { @@ -129,6 +129,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:51:41.653730Z", + "id": "CVE-2026-86692", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:52:02.441Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/87xxx/CVE-2026-87744.json b/data/2026/87xxx/CVE-2026-87744.json index bc89510cf0..7e65ac7894 100644 --- a/data/2026/87xxx/CVE-2026-87744.json +++ b/data/2026/87xxx/CVE-2026-87744.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-09T05:58:00.263Z", "datePublished": "2026-10-12T18:41:46.751Z", - "dateUpdated": "2026-10-15T23:11:43.650Z" + "dateUpdated": "2026-11-12T17:14:26.733Z" }, "containers": { "cna": { @@ -134,14 +134,14 @@ "descriptions": [ { "cweId": "CWE-425", - "description": "Direct Request ('Forced Browsing')", + "description": "Direct Request", "lang": "en", "type": "CWE" } ] } ], - "x_redhatCweChain": "CWE-425: Direct Request ('Forced Browsing')", + "x_redhatCweChain": "CWE-425: Direct Request", "workarounds": [ { "lang": "en", @@ -169,7 +169,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-10-15T23:11:43.650Z" + "dateUpdated": "2026-11-12T17:14:26.733Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/87xxx/CVE-2026-87857.json b/data/2026/87xxx/CVE-2026-87857.json index a22fa7912d..81856242c2 100644 --- a/data/2026/87xxx/CVE-2026-87857.json +++ b/data/2026/87xxx/CVE-2026-87857.json @@ -8,7 +8,7 @@ "assignerShortName": "Temporal", "dateReserved": "2026-09-09T13:05:41.629Z", "datePublished": "2026-11-09T19:45:14.927Z", - "dateUpdated": "2026-11-09T19:45:14.927Z" + "dateUpdated": "2026-11-12T16:49:29.027Z" }, "containers": { "cna": { @@ -329,6 +329,40 @@ "source": { "discovery": "INTERNAL" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:49:08.520166Z", + "id": "CVE-2026-87857", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:49:29.027Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/90xxx/CVE-2026-90585.json b/data/2026/90xxx/CVE-2026-90585.json index c6be1f28d2..0cfc1d3c86 100644 --- a/data/2026/90xxx/CVE-2026-90585.json +++ b/data/2026/90xxx/CVE-2026-90585.json @@ -8,7 +8,7 @@ "assignerShortName": "zephyr", "dateReserved": "2026-09-12T18:04:35.296Z", "datePublished": "2026-11-09T22:03:56.009Z", - "dateUpdated": "2026-11-09T22:03:56.009Z" + "dateUpdated": "2026-11-12T17:17:19.801Z" }, "containers": { "cna": { @@ -97,6 +97,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:17:07.854312Z", + "id": "CVE-2026-90585", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:17:19.801Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/90xxx/CVE-2026-90586.json b/data/2026/90xxx/CVE-2026-90586.json index 53948924f4..b4c1dc7062 100644 --- a/data/2026/90xxx/CVE-2026-90586.json +++ b/data/2026/90xxx/CVE-2026-90586.json @@ -8,7 +8,7 @@ "assignerShortName": "zephyr", "dateReserved": "2026-09-12T18:04:37.259Z", "datePublished": "2026-11-09T22:03:58.198Z", - "dateUpdated": "2026-11-09T22:03:58.198Z" + "dateUpdated": "2026-11-12T17:18:01.962Z" }, "containers": { "cna": { @@ -98,6 +98,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T17:17:43.773985Z", + "id": "CVE-2026-90586", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T17:18:01.962Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/91xxx/CVE-2026-91150.json b/data/2026/91xxx/CVE-2026-91150.json index 1d49354349..95dd5700ab 100644 --- a/data/2026/91xxx/CVE-2026-91150.json +++ b/data/2026/91xxx/CVE-2026-91150.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-14T20:36:53.441Z", "datePublished": "2026-11-11T18:38:12.565Z", - "dateUpdated": "2026-11-12T13:32:07.208Z" + "dateUpdated": "2026-11-12T16:44:58.470Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "cockpit", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:356.4.1-1.el10_2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", @@ -183,6 +201,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:99599", + "name": "RHSA-2026:99599", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99600", "name": "RHSA-2026:99600", @@ -272,7 +298,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T13:32:07.208Z" + "dateUpdated": "2026-11-12T16:44:58.470Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/91xxx/CVE-2026-91151.json b/data/2026/91xxx/CVE-2026-91151.json index f5b43027fa..eb66f506a2 100644 --- a/data/2026/91xxx/CVE-2026-91151.json +++ b/data/2026/91xxx/CVE-2026-91151.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-14T20:37:18.522Z", "datePublished": "2026-11-11T19:46:14.718Z", - "dateUpdated": "2026-11-12T13:32:07.225Z" + "dateUpdated": "2026-11-12T16:45:02.638Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10.2 Extended Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "cockpit", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:356.4.1-1.el10_2", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux_eus:10.2" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", @@ -183,6 +201,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:99599", + "name": "RHSA-2026:99599", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99600", "name": "RHSA-2026:99600", @@ -272,7 +298,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T13:32:07.225Z" + "dateUpdated": "2026-11-12T16:45:02.638Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/91xxx/CVE-2026-91871.json b/data/2026/91xxx/CVE-2026-91871.json index 48130e10c0..0a8933c2ce 100644 --- a/data/2026/91xxx/CVE-2026-91871.json +++ b/data/2026/91xxx/CVE-2026-91871.json @@ -8,7 +8,7 @@ "assignerShortName": "dell", "dateReserved": "2026-09-15T10:04:43.433Z", "datePublished": "2026-11-11T17:41:27.080Z", - "dateUpdated": "2026-11-11T17:41:27.080Z" + "dateUpdated": "2026-11-12T16:23:34.511Z" }, "containers": { "cna": { @@ -97,6 +97,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:23:23.301945Z", + "id": "CVE-2026-91871", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:23:34.511Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/91xxx/CVE-2026-91876.json b/data/2026/91xxx/CVE-2026-91876.json index 1ba0361454..1559e09d69 100644 --- a/data/2026/91xxx/CVE-2026-91876.json +++ b/data/2026/91xxx/CVE-2026-91876.json @@ -8,7 +8,7 @@ "assignerShortName": "dell", "dateReserved": "2026-09-15T10:04:43.433Z", "datePublished": "2026-11-11T18:22:41.165Z", - "dateUpdated": "2026-11-11T18:22:41.165Z" + "dateUpdated": "2026-11-12T16:22:49.295Z" }, "containers": { "cna": { @@ -97,6 +97,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:22:41.234734Z", + "id": "CVE-2026-91876", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:22:49.295Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/91xxx/CVE-2026-91880.json b/data/2026/91xxx/CVE-2026-91880.json index 2e7c93f2b1..bea6942f0a 100644 --- a/data/2026/91xxx/CVE-2026-91880.json +++ b/data/2026/91xxx/CVE-2026-91880.json @@ -8,7 +8,7 @@ "assignerShortName": "dell", "dateReserved": "2026-09-15T10:04:43.433Z", "datePublished": "2026-11-11T18:01:43.171Z", - "dateUpdated": "2026-11-11T18:01:43.171Z" + "dateUpdated": "2026-11-12T16:21:26.372Z" }, "containers": { "cna": { @@ -97,6 +97,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:21:04.288816Z", + "id": "CVE-2026-91880", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:21:26.372Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96285.json b/data/2026/96xxx/CVE-2026-96285.json index 89ba7113d4..6ea366c9c5 100644 --- a/data/2026/96xxx/CVE-2026-96285.json +++ b/data/2026/96xxx/CVE-2026-96285.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-09-22T21:07:41.624Z", "datePublished": "2026-11-09T09:47:22.524Z", - "dateUpdated": "2026-11-09T09:47:22.524Z" + "dateUpdated": "2026-11-12T16:19:23.426Z" }, "containers": { "cna": { @@ -121,6 +121,56 @@ "x_generator": { "engine": "airflow-s/generate_cve_json.py" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.8, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T16:19:19.371977Z", + "id": "CVE-2026-96285", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T16:19:23.426Z" + } + } + ] } } \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index 960832c4d1..1ee2dbbb64 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,427 +1,80 @@ { - "fetchTime": "2026-11-12T16:16:46.329Z", - "numberOfChanges": 70, - "new": [], + "fetchTime": "2026-11-12T17:18:40.627Z", + "numberOfChanges": 12, + "new": [ + { + "cveId": "CVE-2026-106154", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106154", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106154.json", + "dateUpdated": "2026-11-12T17:13:26.499Z" + } + ], "updated": [ { - "cveId": "CVE-2026-101031", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101031", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101031.json", - "dateUpdated": "2026-11-12T16:11:23.932Z" + "cveId": "CVE-2026-114032", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114032", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114032.json", + "dateUpdated": "2026-11-12T17:16:38.649Z" }, { - "cveId": "CVE-2026-107474", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107474", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107474.json", - "dateUpdated": "2026-11-12T16:06:13.098Z" + "cveId": "CVE-2026-124018", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124018", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124018.json", + "dateUpdated": "2026-11-12T17:17:47.526Z" }, { - "cveId": "CVE-2026-112168", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112168", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112168.json", - "dateUpdated": "2026-11-12T16:08:46.068Z" + "cveId": "CVE-2026-126994", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126994", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126994.json", + "dateUpdated": "2026-11-12T17:17:55.217Z" }, { - "cveId": "CVE-2026-112169", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112169", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112169.json", - "dateUpdated": "2026-11-12T16:09:21.714Z" + "cveId": "CVE-2026-126998", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126998", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126998.json", + "dateUpdated": "2026-11-12T17:17:39.139Z" }, { - "cveId": "CVE-2026-112170", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112170", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112170.json", - "dateUpdated": "2026-11-12T16:09:52.614Z" + "cveId": "CVE-2026-127121", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127121", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127121.json", + "dateUpdated": "2026-11-12T17:17:31.603Z" }, { - "cveId": "CVE-2026-112171", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112171", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112171.json", - "dateUpdated": "2026-11-12T16:10:27.413Z" + "cveId": "CVE-2026-127141", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127141", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127141.json", + "dateUpdated": "2026-11-12T17:17:20.710Z" }, { - "cveId": "CVE-2026-113504", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113504", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113504.json", - "dateUpdated": "2026-11-12T16:02:59.170Z" + "cveId": "CVE-2026-63282", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63282", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63282.json", + "dateUpdated": "2026-11-12T17:13:04.418Z" }, { - "cveId": "CVE-2026-113508", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113508", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113508.json", - "dateUpdated": "2026-11-12T16:14:09.433Z" + "cveId": "CVE-2026-63288", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63288", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63288.json", + "dateUpdated": "2026-11-12T17:13:55.816Z" }, { - "cveId": "CVE-2026-118450", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118450", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118450.json", - "dateUpdated": "2026-11-12T16:02:56.699Z" + "cveId": "CVE-2026-87744", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87744", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87744.json", + "dateUpdated": "2026-11-12T17:14:26.733Z" }, { - "cveId": "CVE-2026-118458", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118458", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118458.json", - "dateUpdated": "2026-11-12T16:03:42.687Z" + "cveId": "CVE-2026-90585", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90585", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90585.json", + "dateUpdated": "2026-11-12T17:17:19.801Z" }, { - "cveId": "CVE-2026-118459", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118459", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118459.json", - "dateUpdated": "2026-11-12T16:04:20.598Z" - }, - { - "cveId": "CVE-2026-118460", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118460", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118460.json", - "dateUpdated": "2026-11-12T16:07:25.645Z" - }, - { - "cveId": "CVE-2026-118461", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118461", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118461.json", - "dateUpdated": "2026-11-12T16:06:40.143Z" - }, - { - "cveId": "CVE-2026-118791", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118791", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118791.json", - "dateUpdated": "2026-11-12T16:05:56.868Z" - }, - { - "cveId": "CVE-2026-118792", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118792", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118792.json", - "dateUpdated": "2026-11-12T16:04:57.172Z" - }, - { - "cveId": "CVE-2026-119613", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119613", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119613.json", - "dateUpdated": "2026-11-12T16:11:19.623Z" - }, - { - "cveId": "CVE-2026-124741", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124741", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124741.json", - "dateUpdated": "2026-11-12T16:02:07.774Z" - }, - { - "cveId": "CVE-2026-125786", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125786", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125786.json", - "dateUpdated": "2026-11-12T16:13:50.513Z" - }, - { - "cveId": "CVE-2026-126082", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126082", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126082.json", - "dateUpdated": "2026-11-12T16:02:27.295Z" - }, - { - "cveId": "CVE-2026-126840", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126840", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126840.json", - "dateUpdated": "2026-11-12T16:06:18.182Z" - }, - { - "cveId": "CVE-2026-126842", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126842", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126842.json", - "dateUpdated": "2026-11-12T16:11:58.901Z" - }, - { - "cveId": "CVE-2026-126843", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126843", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126843.json", - "dateUpdated": "2026-11-12T16:07:04.820Z" - }, - { - "cveId": "CVE-2026-126846", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126846", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126846.json", - "dateUpdated": "2026-11-12T16:15:12.512Z" - }, - { - "cveId": "CVE-2026-126847", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126847", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126847.json", - "dateUpdated": "2026-11-12T16:12:39.983Z" - }, - { - "cveId": "CVE-2026-126849", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126849", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126849.json", - "dateUpdated": "2026-11-12T16:05:32.229Z" - }, - { - "cveId": "CVE-2026-126851", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126851", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126851.json", - "dateUpdated": "2026-11-12T16:11:03.194Z" - }, - { - "cveId": "CVE-2026-126852", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126852", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126852.json", - "dateUpdated": "2026-11-12T16:05:01.146Z" - }, - { - "cveId": "CVE-2026-126859", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126859", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126859.json", - "dateUpdated": "2026-11-12T16:14:13.071Z" - }, - { - "cveId": "CVE-2026-126860", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126860", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126860.json", - "dateUpdated": "2026-11-12T16:09:14.106Z" - }, - { - "cveId": "CVE-2026-126861", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126861", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126861.json", - "dateUpdated": "2026-11-12T16:08:55.614Z" - }, - { - "cveId": "CVE-2026-126863", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126863", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126863.json", - "dateUpdated": "2026-11-12T16:10:15.705Z" - }, - { - "cveId": "CVE-2026-126864", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126864", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126864.json", - "dateUpdated": "2026-11-12T16:14:42.486Z" - }, - { - "cveId": "CVE-2026-126865", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126865", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126865.json", - "dateUpdated": "2026-11-12T16:12:25.017Z" - }, - { - "cveId": "CVE-2026-126867", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126867", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126867.json", - "dateUpdated": "2026-11-12T16:11:21.420Z" - }, - { - "cveId": "CVE-2026-126868", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126868", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126868.json", - "dateUpdated": "2026-11-12T16:04:45.799Z" - }, - { - "cveId": "CVE-2026-126869", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126869", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126869.json", - "dateUpdated": "2026-11-12T16:09:59.152Z" - }, - { - "cveId": "CVE-2026-126872", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126872", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126872.json", - "dateUpdated": "2026-11-12T16:10:17.226Z" - }, - { - "cveId": "CVE-2026-126873", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126873", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126873.json", - "dateUpdated": "2026-11-12T16:10:44.582Z" - }, - { - "cveId": "CVE-2026-126874", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126874", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126874.json", - "dateUpdated": "2026-11-12T16:09:43.142Z" - }, - { - "cveId": "CVE-2026-126876", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126876", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126876.json", - "dateUpdated": "2026-11-12T16:09:28.153Z" - }, - { - "cveId": "CVE-2026-126879", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126879", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126879.json", - "dateUpdated": "2026-11-12T16:15:26.965Z" - }, - { - "cveId": "CVE-2026-126880", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126880", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126880.json", - "dateUpdated": "2026-11-12T16:07:51.129Z" - }, - { - "cveId": "CVE-2026-126881", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126881", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126881.json", - "dateUpdated": "2026-11-12T16:10:46.730Z" - }, - { - "cveId": "CVE-2026-126885", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126885", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126885.json", - "dateUpdated": "2026-11-12T16:15:56.416Z" - }, - { - "cveId": "CVE-2026-126886", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126886", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126886.json", - "dateUpdated": "2026-11-12T16:13:58.134Z" - }, - { - "cveId": "CVE-2026-126887", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126887", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126887.json", - "dateUpdated": "2026-11-12T16:13:41.489Z" - }, - { - "cveId": "CVE-2026-126888", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126888", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126888.json", - "dateUpdated": "2026-11-12T16:07:19.690Z" - }, - { - "cveId": "CVE-2026-126889", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126889", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126889.json", - "dateUpdated": "2026-11-12T16:14:28.051Z" - }, - { - "cveId": "CVE-2026-126890", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126890", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126890.json", - "dateUpdated": "2026-11-12T16:04:14.582Z" - }, - { - "cveId": "CVE-2026-126892", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126892", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126892.json", - "dateUpdated": "2026-11-12T16:06:49.188Z" - }, - { - "cveId": "CVE-2026-126893", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126893", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126893.json", - "dateUpdated": "2026-11-12T16:06:02.670Z" - }, - { - "cveId": "CVE-2026-126895", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126895", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126895.json", - "dateUpdated": "2026-11-12T16:15:41.417Z" - }, - { - "cveId": "CVE-2026-126897", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126897", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126897.json", - "dateUpdated": "2026-11-12T16:06:34.220Z" - }, - { - "cveId": "CVE-2026-126899", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126899", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126899.json", - "dateUpdated": "2026-11-12T16:03:44.004Z" - }, - { - "cveId": "CVE-2026-126900", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126900", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126900.json", - "dateUpdated": "2026-11-12T16:11:19.169Z" - }, - { - "cveId": "CVE-2026-126901", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126901", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126901.json", - "dateUpdated": "2026-11-12T16:05:16.157Z" - }, - { - "cveId": "CVE-2026-126905", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126905", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126905.json", - "dateUpdated": "2026-11-12T16:08:23.268Z" - }, - { - "cveId": "CVE-2026-126908", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126908", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126908.json", - "dateUpdated": "2026-11-12T16:05:46.657Z" - }, - { - "cveId": "CVE-2026-126909", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126909", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126909.json", - "dateUpdated": "2026-11-12T16:12:56.045Z" - }, - { - "cveId": "CVE-2026-126910", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126910", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126910.json", - "dateUpdated": "2026-11-12T16:11:51.282Z" - }, - { - "cveId": "CVE-2026-126911", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126911", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126911.json", - "dateUpdated": "2026-11-12T16:14:57.487Z" - }, - { - "cveId": "CVE-2026-126912", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126912", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126912.json", - "dateUpdated": "2026-11-12T16:13:27.000Z" - }, - { - "cveId": "CVE-2026-126916", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126916", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126916.json", - "dateUpdated": "2026-11-12T16:12:09.011Z" - }, - { - "cveId": "CVE-2026-126917", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126917", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126917.json", - "dateUpdated": "2026-11-12T16:08:38.693Z" - }, - { - "cveId": "CVE-2026-126918", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126918", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126918.json", - "dateUpdated": "2026-11-12T16:09:11.124Z" - }, - { - "cveId": "CVE-2026-126919", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126919", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126919.json", - "dateUpdated": "2026-11-12T16:13:11.542Z" - }, - { - "cveId": "CVE-2026-126921", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126921", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126921.json", - "dateUpdated": "2026-11-12T16:04:30.665Z" - }, - { - "cveId": "CVE-2026-92683", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92683", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92683.json", - "dateUpdated": "2026-11-12T16:08:55.061Z" - }, - { - "cveId": "CVE-2026-95648", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95648", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95648.json", - "dateUpdated": "2026-11-12T16:08:09.366Z" - }, - { - "cveId": "CVE-2026-9165", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-9165", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9165.json", - "dateUpdated": "2026-11-12T16:08:03.714Z" + "cveId": "CVE-2026-90586", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90586", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90586.json", + "dateUpdated": "2026-11-12T17:18:01.962Z" } ], "error": [] diff --git a/data/deltaLog.json b/data/deltaLog.json index dd82a093ed..6d996ca324 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,673 @@ [ + { + "fetchTime": "2026-11-12T17:18:40.627Z", + "numberOfChanges": 12, + "new": [ + { + "cveId": "CVE-2026-106154", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106154", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106154.json", + "dateUpdated": "2026-11-12T17:13:26.499Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-114032", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114032", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114032.json", + "dateUpdated": "2026-11-12T17:16:38.649Z" + }, + { + "cveId": "CVE-2026-124018", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124018", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124018.json", + "dateUpdated": "2026-11-12T17:17:47.526Z" + }, + { + "cveId": "CVE-2026-126994", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126994", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126994.json", + "dateUpdated": "2026-11-12T17:17:55.217Z" + }, + { + "cveId": "CVE-2026-126998", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126998", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126998.json", + "dateUpdated": "2026-11-12T17:17:39.139Z" + }, + { + "cveId": "CVE-2026-127121", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127121", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127121.json", + "dateUpdated": "2026-11-12T17:17:31.603Z" + }, + { + "cveId": "CVE-2026-127141", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127141", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127141.json", + "dateUpdated": "2026-11-12T17:17:20.710Z" + }, + { + "cveId": "CVE-2026-63282", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63282", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63282.json", + "dateUpdated": "2026-11-12T17:13:04.418Z" + }, + { + "cveId": "CVE-2026-63288", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63288", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63288.json", + "dateUpdated": "2026-11-12T17:13:55.816Z" + }, + { + "cveId": "CVE-2026-87744", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87744", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87744.json", + "dateUpdated": "2026-11-12T17:14:26.733Z" + }, + { + "cveId": "CVE-2026-90585", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90585", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90585.json", + "dateUpdated": "2026-11-12T17:17:19.801Z" + }, + { + "cveId": "CVE-2026-90586", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90586", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90586.json", + "dateUpdated": "2026-11-12T17:18:01.962Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T17:12:59.562Z", + "numberOfChanges": 23, + "new": [ + { + "cveId": "CVE-2026-124696", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124696", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124696.json", + "dateUpdated": "2026-11-12T17:02:11.806Z" + }, + { + "cveId": "CVE-2026-124697", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124697", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124697.json", + "dateUpdated": "2026-11-12T17:06:27.602Z" + }, + { + "cveId": "CVE-2026-124698", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124698", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124698.json", + "dateUpdated": "2026-11-12T17:09:34.698Z" + }, + { + "cveId": "CVE-2026-126192", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126192", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126192.json", + "dateUpdated": "2026-11-12T17:09:14.205Z" + }, + { + "cveId": "CVE-2026-126193", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126193", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126193.json", + "dateUpdated": "2026-11-12T17:12:02.083Z" + }, + { + "cveId": "CVE-2026-126835", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126835", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126835.json", + "dateUpdated": "2026-11-12T17:06:05.064Z" + }, + { + "cveId": "CVE-2026-82977", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82977", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82977.json", + "dateUpdated": "2026-11-12T17:01:19.318Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-114031", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114031", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114031.json", + "dateUpdated": "2026-11-12T17:11:30.616Z" + }, + { + "cveId": "CVE-2026-115336", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115336", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115336.json", + "dateUpdated": "2026-11-12T17:02:19.621Z" + }, + { + "cveId": "CVE-2026-115339", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115339", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115339.json", + "dateUpdated": "2026-11-12T17:03:31.754Z" + }, + { + "cveId": "CVE-2026-115864", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115864", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115864.json", + "dateUpdated": "2026-11-12T17:08:12.238Z" + }, + { + "cveId": "CVE-2026-115934", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115934", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115934.json", + "dateUpdated": "2026-11-12T17:06:16.752Z" + }, + { + "cveId": "CVE-2026-117477", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117477", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117477.json", + "dateUpdated": "2026-11-12T17:07:12.689Z" + }, + { + "cveId": "CVE-2026-123790", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123790", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123790.json", + "dateUpdated": "2026-11-12T17:05:16.327Z" + }, + { + "cveId": "CVE-2026-124034", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124034", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124034.json", + "dateUpdated": "2026-11-12T17:02:13.268Z" + }, + { + "cveId": "CVE-2026-124035", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124035", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124035.json", + "dateUpdated": "2026-11-12T17:03:05.901Z" + }, + { + "cveId": "CVE-2026-124598", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124598", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124598.json", + "dateUpdated": "2026-11-12T17:08:39.602Z" + }, + { + "cveId": "CVE-2026-127109", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127109", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127109.json", + "dateUpdated": "2026-11-12T17:05:17.829Z" + }, + { + "cveId": "CVE-2026-13409", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13409", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13409.json", + "dateUpdated": "2026-11-12T17:10:18.024Z" + }, + { + "cveId": "CVE-2026-14542", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-14542", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14542.json", + "dateUpdated": "2026-11-12T17:11:16.083Z" + }, + { + "cveId": "CVE-2026-14543", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-14543", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14543.json", + "dateUpdated": "2026-11-12T17:11:50.904Z" + }, + { + "cveId": "CVE-2026-76970", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76970", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76970.json", + "dateUpdated": "2026-11-12T17:07:57.840Z" + }, + { + "cveId": "CVE-2026-76973", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76973", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76973.json", + "dateUpdated": "2026-11-12T17:09:45.229Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T17:01:12.570Z", + "numberOfChanges": 6, + "new": [ + { + "cveId": "CVE-2026-121876", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121876", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121876.json", + "dateUpdated": "2026-11-12T16:55:35.424Z" + }, + { + "cveId": "CVE-2026-126191", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126191", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126191.json", + "dateUpdated": "2026-11-12T16:57:01.566Z" + }, + { + "cveId": "CVE-2026-126837", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126837", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126837.json", + "dateUpdated": "2026-11-12T17:00:11.830Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-121689", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121689", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121689.json", + "dateUpdated": "2026-11-12T16:56:37.142Z" + }, + { + "cveId": "CVE-2026-121690", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121690", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121690.json", + "dateUpdated": "2026-11-12T17:00:05.885Z" + }, + { + "cveId": "CVE-2026-124033", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124033", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124033.json", + "dateUpdated": "2026-11-12T17:01:07.789Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T16:55:29.074Z", + "numberOfChanges": 10, + "new": [ + { + "cveId": "CVE-2026-124695", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124695", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124695.json", + "dateUpdated": "2026-11-12T16:52:14.648Z" + }, + { + "cveId": "CVE-2026-126189", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126189", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126189.json", + "dateUpdated": "2026-11-12T16:53:00.822Z" + }, + { + "cveId": "CVE-2026-126190", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126190", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126190.json", + "dateUpdated": "2026-11-12T16:54:14.644Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-108472", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108472", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108472.json", + "dateUpdated": "2026-11-12T16:52:56.950Z" + }, + { + "cveId": "CVE-2026-121686", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121686", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121686.json", + "dateUpdated": "2026-11-12T16:50:18.235Z" + }, + { + "cveId": "CVE-2026-121687", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121687", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121687.json", + "dateUpdated": "2026-11-12T16:53:40.336Z" + }, + { + "cveId": "CVE-2026-121688", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121688", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121688.json", + "dateUpdated": "2026-11-12T16:55:03.614Z" + }, + { + "cveId": "CVE-2026-84410", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84410", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84410.json", + "dateUpdated": "2026-11-12T16:53:34.650Z" + }, + { + "cveId": "CVE-2026-86692", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-86692", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86692.json", + "dateUpdated": "2026-11-12T16:52:02.441Z" + }, + { + "cveId": "CVE-2026-87857", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87857", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87857.json", + "dateUpdated": "2026-11-12T16:49:29.027Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T16:49:22.292Z", + "numberOfChanges": 18, + "new": [ + { + "cveId": "CVE-2026-82032", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82032", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82032.json", + "dateUpdated": "2026-11-12T16:44:20.347Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-112315", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112315", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112315.json", + "dateUpdated": "2026-11-12T16:47:25.081Z" + }, + { + "cveId": "CVE-2026-112316", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112316", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112316.json", + "dateUpdated": "2026-11-12T16:47:29.411Z" + }, + { + "cveId": "CVE-2026-112317", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112317", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112317.json", + "dateUpdated": "2026-11-12T16:47:35.522Z" + }, + { + "cveId": "CVE-2026-112318", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112318", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112318.json", + "dateUpdated": "2026-11-12T16:47:39.479Z" + }, + { + "cveId": "CVE-2026-112319", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112319", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112319.json", + "dateUpdated": "2026-11-12T16:47:44.222Z" + }, + { + "cveId": "CVE-2026-112320", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112320", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112320.json", + "dateUpdated": "2026-11-12T16:47:49.479Z" + }, + { + "cveId": "CVE-2026-112321", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112321", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112321.json", + "dateUpdated": "2026-11-12T16:47:53.597Z" + }, + { + "cveId": "CVE-2026-112322", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112322", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112322.json", + "dateUpdated": "2026-11-12T16:47:57.396Z" + }, + { + "cveId": "CVE-2026-112323", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112323", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112323.json", + "dateUpdated": "2026-11-12T16:48:02.393Z" + }, + { + "cveId": "CVE-2026-114594", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114594", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114594.json", + "dateUpdated": "2026-11-12T16:44:31.650Z" + }, + { + "cveId": "CVE-2026-115340", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115340", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115340.json", + "dateUpdated": "2026-11-12T16:47:58.302Z" + }, + { + "cveId": "CVE-2026-119079", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119079", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119079.json", + "dateUpdated": "2026-11-12T16:48:13.854Z" + }, + { + "cveId": "CVE-2026-120627", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120627", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120627.json", + "dateUpdated": "2026-11-12T16:47:47.072Z" + }, + { + "cveId": "CVE-2026-121685", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121685", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121685.json", + "dateUpdated": "2026-11-12T16:48:55.047Z" + }, + { + "cveId": "CVE-2026-124691", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124691", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124691.json", + "dateUpdated": "2026-11-12T16:47:05.093Z" + }, + { + "cveId": "CVE-2026-91150", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91150", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91150.json", + "dateUpdated": "2026-11-12T16:44:58.470Z" + }, + { + "cveId": "CVE-2026-91151", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91151", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91151.json", + "dateUpdated": "2026-11-12T16:45:02.638Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T16:43:25.814Z", + "numberOfChanges": 6, + "new": [ + { + "cveId": "CVE-2026-124691", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124691", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124691.json", + "dateUpdated": "2026-11-12T16:42:30.326Z" + }, + { + "cveId": "CVE-2026-127203", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127203", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127203.json", + "dateUpdated": "2026-11-12T16:42:40.069Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-124959", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124959", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124959.json", + "dateUpdated": "2026-11-12T16:41:04.273Z" + }, + { + "cveId": "CVE-2026-17278", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17278", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17278.json", + "dateUpdated": "2026-11-12T16:38:45.331Z" + }, + { + "cveId": "CVE-2026-17360", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17360", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17360.json", + "dateUpdated": "2026-11-12T16:39:54.676Z" + }, + { + "cveId": "CVE-2026-62107", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62107", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62107.json", + "dateUpdated": "2026-11-12T16:41:54.550Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T16:37:39.900Z", + "numberOfChanges": 6, + "new": [ + { + "cveId": "CVE-2026-127202", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127202", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127202.json", + "dateUpdated": "2026-11-12T16:37:02.081Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-17309", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17309", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17309.json", + "dateUpdated": "2026-11-12T16:35:47.324Z" + }, + { + "cveId": "CVE-2026-17315", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17315", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17315.json", + "dateUpdated": "2026-11-12T16:32:48.187Z" + }, + { + "cveId": "CVE-2026-17329", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17329", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17329.json", + "dateUpdated": "2026-11-12T16:34:01.332Z" + }, + { + "cveId": "CVE-2026-18838", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18838", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18838.json", + "dateUpdated": "2026-11-12T16:37:22.259Z" + }, + { + "cveId": "CVE-2026-19552", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19552", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19552.json", + "dateUpdated": "2026-11-12T16:30:53.287Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T16:30:23.738Z", + "numberOfChanges": 6, + "new": [ + { + "cveId": "CVE-2025-10698", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-10698", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10698.json", + "dateUpdated": "2026-11-12T16:29:44.443Z" + }, + { + "cveId": "CVE-2026-16052", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16052", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16052.json", + "dateUpdated": "2026-11-12T16:28:03.251Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-118492", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118492", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118492.json", + "dateUpdated": "2026-11-12T16:26:15.625Z" + }, + { + "cveId": "CVE-2026-121841", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121841", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121841.json", + "dateUpdated": "2026-11-12T16:26:22.329Z" + }, + { + "cveId": "CVE-2026-123779", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123779", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123779.json", + "dateUpdated": "2026-11-12T16:25:02.402Z" + }, + { + "cveId": "CVE-2026-124850", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124850", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124850.json", + "dateUpdated": "2026-11-12T16:24:54.028Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T16:24:38.572Z", + "numberOfChanges": 11, + "new": [ + { + "cveId": "CVE-2026-127029", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127029", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127029.json", + "dateUpdated": "2026-11-12T16:21:48.973Z" + }, + { + "cveId": "CVE-2026-127030", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127030", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127030.json", + "dateUpdated": "2026-11-12T16:21:52.568Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-119274", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119274", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119274.json", + "dateUpdated": "2026-11-12T16:19:01.521Z" + }, + { + "cveId": "CVE-2026-119474", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119474", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119474.json", + "dateUpdated": "2026-11-12T16:20:59.367Z" + }, + { + "cveId": "CVE-2026-123753", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123753", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123753.json", + "dateUpdated": "2026-11-12T16:22:22.516Z" + }, + { + "cveId": "CVE-2026-124249", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124249", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124249.json", + "dateUpdated": "2026-11-12T16:23:47.134Z" + }, + { + "cveId": "CVE-2026-16283", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16283", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16283.json", + "dateUpdated": "2026-11-12T16:19:43.611Z" + }, + { + "cveId": "CVE-2026-91871", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91871", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91871.json", + "dateUpdated": "2026-11-12T16:23:34.511Z" + }, + { + "cveId": "CVE-2026-91876", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91876", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91876.json", + "dateUpdated": "2026-11-12T16:22:49.295Z" + }, + { + "cveId": "CVE-2026-91880", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91880", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91880.json", + "dateUpdated": "2026-11-12T16:21:26.372Z" + }, + { + "cveId": "CVE-2026-96285", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96285", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96285.json", + "dateUpdated": "2026-11-12T16:19:23.426Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-12T16:16:46.329Z", "numberOfChanges": 70, @@ -851793,1469 +852462,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-13T17:18:30.406Z", - "numberOfChanges": 35, - "new": [ - { - "cveId": "CVE-2026-104011", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104011", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104011.json", - "dateUpdated": "2026-10-13T17:03:10.872Z" - }, - { - "cveId": "CVE-2026-108375", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108375", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108375.json", - "dateUpdated": "2026-10-13T17:05:41.515Z" - }, - { - "cveId": "CVE-2026-108376", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108376", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108376.json", - "dateUpdated": "2026-10-13T17:17:07.502Z" - }, - { - "cveId": "CVE-2026-15577", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-15577", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15577.json", - "dateUpdated": "2026-10-13T17:05:49.743Z" - }, - { - "cveId": "CVE-2026-33374", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33374", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33374.json", - "dateUpdated": "2026-10-13T17:05:49.782Z" - }, - { - "cveId": "CVE-2026-52394", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-52394", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/52xxx/CVE-2026-52394.json", - "dateUpdated": "2026-10-13T17:16:19.759Z" - }, - { - "cveId": "CVE-2026-93294", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93294", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93294.json", - "dateUpdated": "2026-10-13T17:05:49.715Z" - }, - { - "cveId": "CVE-2026-95502", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95502", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95502.json", - "dateUpdated": "2026-10-13T17:05:49.670Z" - } - ], - "updated": [ - { - "cveId": "CVE-2025-57847", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-57847", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57847.json", - "dateUpdated": "2026-10-13T17:10:12.008Z" - }, - { - "cveId": "CVE-2026-107815", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107815", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107815.json", - "dateUpdated": "2026-10-13T17:01:48.035Z" - }, - { - "cveId": "CVE-2026-107817", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107817", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107817.json", - "dateUpdated": "2026-10-13T17:04:02.004Z" - }, - { - "cveId": "CVE-2026-107820", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107820", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107820.json", - "dateUpdated": "2026-10-13T17:05:59.249Z" - }, - { - "cveId": "CVE-2026-107823", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107823", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107823.json", - "dateUpdated": "2026-10-13T17:04:53.917Z" - }, - { - "cveId": "CVE-2026-107838", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107838", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107838.json", - "dateUpdated": "2026-10-13T17:07:38.700Z" - }, - { - "cveId": "CVE-2026-107843", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107843", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107843.json", - "dateUpdated": "2026-10-13T17:08:23.664Z" - }, - { - "cveId": "CVE-2026-107851", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107851", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107851.json", - "dateUpdated": "2026-10-13T17:03:02.847Z" - }, - { - "cveId": "CVE-2026-108711", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108711", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108711.json", - "dateUpdated": "2026-10-13T17:01:29.798Z" - }, - { - "cveId": "CVE-2026-108716", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108716", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108716.json", - "dateUpdated": "2026-10-13T17:01:20.229Z" - }, - { - "cveId": "CVE-2026-108721", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108721", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108721.json", - "dateUpdated": "2026-10-13T17:01:12.777Z" - }, - { - "cveId": "CVE-2026-108726", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108726", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108726.json", - "dateUpdated": "2026-10-13T17:01:01.089Z" - }, - { - "cveId": "CVE-2026-108731", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108731", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108731.json", - "dateUpdated": "2026-10-13T17:00:52.894Z" - }, - { - "cveId": "CVE-2026-108736", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108736", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108736.json", - "dateUpdated": "2026-10-13T17:00:42.169Z" - }, - { - "cveId": "CVE-2026-108741", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108741", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108741.json", - "dateUpdated": "2026-10-13T17:00:35.001Z" - }, - { - "cveId": "CVE-2026-108923", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108923", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108923.json", - "dateUpdated": "2026-10-13T17:14:38.321Z" - }, - { - "cveId": "CVE-2026-109606", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109606", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109606.json", - "dateUpdated": "2026-10-13T17:10:26.104Z" - }, - { - "cveId": "CVE-2026-109828", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109828", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109828.json", - "dateUpdated": "2026-10-13T17:16:03.306Z" - }, - { - "cveId": "CVE-2026-110126", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110126", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110126.json", - "dateUpdated": "2026-10-13T17:17:38.595Z" - }, - { - "cveId": "CVE-2026-54641", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-54641", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54641.json", - "dateUpdated": "2026-10-13T17:12:20.894Z" - }, - { - "cveId": "CVE-2026-55183", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55183", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55183.json", - "dateUpdated": "2026-10-13T17:13:34.078Z" - }, - { - "cveId": "CVE-2026-5680", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-5680", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5680.json", - "dateUpdated": "2026-10-13T17:08:19.530Z" - }, - { - "cveId": "CVE-2026-5759", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-5759", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5759.json", - "dateUpdated": "2026-10-13T17:01:45.296Z" - }, - { - "cveId": "CVE-2026-66785", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66785", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66785.json", - "dateUpdated": "2026-10-13T17:03:12.662Z" - }, - { - "cveId": "CVE-2026-85733", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85733", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85733.json", - "dateUpdated": "2026-10-13T17:15:18.579Z" - }, - { - "cveId": "CVE-2026-87110", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87110", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87110.json", - "dateUpdated": "2026-10-13T17:01:36.662Z" - }, - { - "cveId": "CVE-2026-88834", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88834", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88834.json", - "dateUpdated": "2026-10-13T17:16:43.731Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-13T17:00:33.303Z", - "numberOfChanges": 99, - "new": [ - { - "cveId": "CVE-2026-109828", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109828", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109828.json", - "dateUpdated": "2026-10-13T17:00:15.758Z" - }, - { - "cveId": "CVE-2026-110097", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110097", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110097.json", - "dateUpdated": "2026-10-13T16:53:02.487Z" - }, - { - "cveId": "CVE-2026-110098", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110098", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110098.json", - "dateUpdated": "2026-10-13T16:53:03.119Z" - }, - { - "cveId": "CVE-2026-110099", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110099", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110099.json", - "dateUpdated": "2026-10-13T16:53:03.744Z" - }, - { - "cveId": "CVE-2026-110100", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110100", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110100.json", - "dateUpdated": "2026-10-13T16:53:04.371Z" - }, - { - "cveId": "CVE-2026-110101", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110101", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110101.json", - "dateUpdated": "2026-10-13T16:53:05.007Z" - }, - { - "cveId": "CVE-2026-110102", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110102", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110102.json", - "dateUpdated": "2026-10-13T16:53:05.596Z" - }, - { - "cveId": "CVE-2026-110103", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110103", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110103.json", - "dateUpdated": "2026-10-13T16:53:06.263Z" - }, - { - "cveId": "CVE-2026-110104", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110104", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110104.json", - "dateUpdated": "2026-10-13T16:53:07.159Z" - }, - { - "cveId": "CVE-2026-110105", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110105", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110105.json", - "dateUpdated": "2026-10-13T16:53:07.878Z" - }, - { - "cveId": "CVE-2026-110106", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110106", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110106.json", - "dateUpdated": "2026-10-13T16:53:08.493Z" - }, - { - "cveId": "CVE-2026-110107", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110107", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110107.json", - "dateUpdated": "2026-10-13T16:53:09.067Z" - }, - { - "cveId": "CVE-2026-110108", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110108", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110108.json", - "dateUpdated": "2026-10-13T16:53:09.830Z" - }, - { - "cveId": "CVE-2026-110109", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110109", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110109.json", - "dateUpdated": "2026-10-13T16:53:10.736Z" - }, - { - "cveId": "CVE-2026-110110", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110110", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110110.json", - "dateUpdated": "2026-10-13T16:53:11.419Z" - }, - { - "cveId": "CVE-2026-110113", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110113", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110113.json", - "dateUpdated": "2026-10-13T16:53:12.086Z" - }, - { - "cveId": "CVE-2026-110114", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110114", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110114.json", - "dateUpdated": "2026-10-13T16:53:12.711Z" - }, - { - "cveId": "CVE-2026-110115", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110115", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110115.json", - "dateUpdated": "2026-10-13T16:53:13.376Z" - }, - { - "cveId": "CVE-2026-110116", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110116", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110116.json", - "dateUpdated": "2026-10-13T16:53:14.032Z" - }, - { - "cveId": "CVE-2026-110117", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110117", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110117.json", - "dateUpdated": "2026-10-13T16:53:14.709Z" - }, - { - "cveId": "CVE-2026-110118", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110118", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110118.json", - "dateUpdated": "2026-10-13T16:53:15.337Z" - }, - { - "cveId": "CVE-2026-110119", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110119", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110119.json", - "dateUpdated": "2026-10-13T16:53:15.977Z" - }, - { - "cveId": "CVE-2026-110120", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110120", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110120.json", - "dateUpdated": "2026-10-13T16:53:16.663Z" - }, - { - "cveId": "CVE-2026-110121", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110121", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110121.json", - "dateUpdated": "2026-10-13T16:53:17.247Z" - }, - { - "cveId": "CVE-2026-110122", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110122", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110122.json", - "dateUpdated": "2026-10-13T16:53:17.861Z" - }, - { - "cveId": "CVE-2026-110123", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110123", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110123.json", - "dateUpdated": "2026-10-13T16:53:18.499Z" - }, - { - "cveId": "CVE-2026-110124", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110124", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110124.json", - "dateUpdated": "2026-10-13T16:53:19.145Z" - }, - { - "cveId": "CVE-2026-110125", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110125", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110125.json", - "dateUpdated": "2026-10-13T16:53:19.780Z" - }, - { - "cveId": "CVE-2026-110126", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110126", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110126.json", - "dateUpdated": "2026-10-13T16:53:20.427Z" - }, - { - "cveId": "CVE-2026-110127", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110127", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110127.json", - "dateUpdated": "2026-10-13T16:53:21.047Z" - }, - { - "cveId": "CVE-2026-110128", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110128", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110128.json", - "dateUpdated": "2026-10-13T16:53:21.745Z" - }, - { - "cveId": "CVE-2026-110129", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110129", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110129.json", - "dateUpdated": "2026-10-13T16:53:22.375Z" - }, - { - "cveId": "CVE-2026-110131", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110131", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110131.json", - "dateUpdated": "2026-10-13T16:53:23.021Z" - }, - { - "cveId": "CVE-2026-53562", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-53562", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/53xxx/CVE-2026-53562.json", - "dateUpdated": "2026-10-13T16:54:56.181Z" - }, - { - "cveId": "CVE-2026-88833", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88833", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88833.json", - "dateUpdated": "2026-10-13T16:56:11.068Z" - }, - { - "cveId": "CVE-2026-88834", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88834", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88834.json", - "dateUpdated": "2026-10-13T16:58:04.572Z" - }, - { - "cveId": "CVE-2026-88838", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88838", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88838.json", - "dateUpdated": "2026-10-13T16:56:15.518Z" - }, - { - "cveId": "CVE-2026-94603", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94603", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94603.json", - "dateUpdated": "2026-10-13T16:51:38.731Z" - } - ], - "updated": [ - { - "cveId": "CVE-2020-37280", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-37280", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/37xxx/CVE-2020-37280.json", - "dateUpdated": "2026-10-13T16:52:41.604Z" - }, - { - "cveId": "CVE-2025-71429", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-71429", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/71xxx/CVE-2025-71429.json", - "dateUpdated": "2026-10-13T16:52:35.566Z" - }, - { - "cveId": "CVE-2026-104083", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104083", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104083.json", - "dateUpdated": "2026-10-13T16:54:35.632Z" - }, - { - "cveId": "CVE-2026-107805", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107805", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107805.json", - "dateUpdated": "2026-10-13T16:52:07.738Z" - }, - { - "cveId": "CVE-2026-107810", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107810", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107810.json", - "dateUpdated": "2026-10-13T16:56:38.228Z" - }, - { - "cveId": "CVE-2026-108106", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108106", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108106.json", - "dateUpdated": "2026-10-13T16:51:17.678Z" - }, - { - "cveId": "CVE-2026-108113", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108113", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108113.json", - "dateUpdated": "2026-10-13T16:53:44.474Z" - }, - { - "cveId": "CVE-2026-108119", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108119", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108119.json", - "dateUpdated": "2026-10-13T16:59:20.957Z" - }, - { - "cveId": "CVE-2026-108159", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108159", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108159.json", - "dateUpdated": "2026-10-13T16:58:15.751Z" - }, - { - "cveId": "CVE-2026-108698", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108698", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108698.json", - "dateUpdated": "2026-10-13T16:59:55.905Z" - }, - { - "cveId": "CVE-2026-108747", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108747", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108747.json", - "dateUpdated": "2026-10-13T17:00:23.907Z" - }, - { - "cveId": "CVE-2026-108752", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108752", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108752.json", - "dateUpdated": "2026-10-13T17:00:17.356Z" - }, - { - "cveId": "CVE-2026-108757", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108757", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108757.json", - "dateUpdated": "2026-10-13T17:00:05.814Z" - }, - { - "cveId": "CVE-2026-108852", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108852", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108852.json", - "dateUpdated": "2026-10-13T16:59:47.203Z" - }, - { - "cveId": "CVE-2026-108857", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108857", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108857.json", - "dateUpdated": "2026-10-13T16:59:39.344Z" - }, - { - "cveId": "CVE-2026-108862", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108862", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108862.json", - "dateUpdated": "2026-10-13T16:59:29.160Z" - }, - { - "cveId": "CVE-2026-108867", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108867", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108867.json", - "dateUpdated": "2026-10-13T16:59:21.132Z" - }, - { - "cveId": "CVE-2026-108872", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108872", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108872.json", - "dateUpdated": "2026-10-13T16:59:10.059Z" - }, - { - "cveId": "CVE-2026-108877", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108877", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108877.json", - "dateUpdated": "2026-10-13T16:59:00.230Z" - }, - { - "cveId": "CVE-2026-108882", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108882", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108882.json", - "dateUpdated": "2026-10-13T16:58:50.637Z" - }, - { - "cveId": "CVE-2026-108887", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108887", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108887.json", - "dateUpdated": "2026-10-13T16:58:43.233Z" - }, - { - "cveId": "CVE-2026-108904", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108904", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108904.json", - "dateUpdated": "2026-10-13T16:58:34.024Z" - }, - { - "cveId": "CVE-2026-108953", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108953", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108953.json", - "dateUpdated": "2026-10-13T16:58:27.456Z" - }, - { - "cveId": "CVE-2026-109169", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109169", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109169.json", - "dateUpdated": "2026-10-13T16:57:49.699Z" - }, - { - "cveId": "CVE-2026-109174", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109174", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109174.json", - "dateUpdated": "2026-10-13T16:58:17.485Z" - }, - { - "cveId": "CVE-2026-109179", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109179", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109179.json", - "dateUpdated": "2026-10-13T16:58:10.043Z" - }, - { - "cveId": "CVE-2026-109184", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109184", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109184.json", - "dateUpdated": "2026-10-13T16:57:59.331Z" - }, - { - "cveId": "CVE-2026-109202", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109202", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109202.json", - "dateUpdated": "2026-10-13T16:57:39.696Z" - }, - { - "cveId": "CVE-2026-109225", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109225", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109225.json", - "dateUpdated": "2026-10-13T16:57:32.583Z" - }, - { - "cveId": "CVE-2026-109239", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109239", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109239.json", - "dateUpdated": "2026-10-13T16:57:08.639Z" - }, - { - "cveId": "CVE-2026-109244", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109244", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109244.json", - "dateUpdated": "2026-10-13T16:56:58.701Z" - }, - { - "cveId": "CVE-2026-109249", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109249", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109249.json", - "dateUpdated": "2026-10-13T16:56:51.739Z" - }, - { - "cveId": "CVE-2026-109254", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109254", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109254.json", - "dateUpdated": "2026-10-13T16:56:42.307Z" - }, - { - "cveId": "CVE-2026-109259", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109259", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109259.json", - "dateUpdated": "2026-10-13T16:56:33.495Z" - }, - { - "cveId": "CVE-2026-109264", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109264", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109264.json", - "dateUpdated": "2026-10-13T16:56:22.060Z" - }, - { - "cveId": "CVE-2026-109269", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109269", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109269.json", - "dateUpdated": "2026-10-13T16:56:11.142Z" - }, - { - "cveId": "CVE-2026-109274", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109274", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109274.json", - "dateUpdated": "2026-10-13T16:55:57.170Z" - }, - { - "cveId": "CVE-2026-109279", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109279", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109279.json", - "dateUpdated": "2026-10-13T16:55:48.141Z" - }, - { - "cveId": "CVE-2026-109284", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109284", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109284.json", - "dateUpdated": "2026-10-13T16:55:38.201Z" - }, - { - "cveId": "CVE-2026-109289", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109289", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109289.json", - "dateUpdated": "2026-10-13T16:55:31.359Z" - }, - { - "cveId": "CVE-2026-109294", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109294", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109294.json", - "dateUpdated": "2026-10-13T16:55:21.600Z" - }, - { - "cveId": "CVE-2026-109299", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109299", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109299.json", - "dateUpdated": "2026-10-13T16:55:13.513Z" - }, - { - "cveId": "CVE-2026-109304", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109304", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109304.json", - "dateUpdated": "2026-10-13T16:55:02.469Z" - }, - { - "cveId": "CVE-2026-109309", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109309", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109309.json", - "dateUpdated": "2026-10-13T16:54:55.029Z" - }, - { - "cveId": "CVE-2026-109314", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109314", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109314.json", - "dateUpdated": "2026-10-13T16:54:44.893Z" - }, - { - "cveId": "CVE-2026-109319", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109319", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109319.json", - "dateUpdated": "2026-10-13T16:54:36.148Z" - }, - { - "cveId": "CVE-2026-109324", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109324", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109324.json", - "dateUpdated": "2026-10-13T16:54:24.396Z" - }, - { - "cveId": "CVE-2026-109329", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109329", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109329.json", - "dateUpdated": "2026-10-13T16:54:16.827Z" - }, - { - "cveId": "CVE-2026-109334", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109334", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109334.json", - "dateUpdated": "2026-10-13T16:54:08.346Z" - }, - { - "cveId": "CVE-2026-109339", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109339", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109339.json", - "dateUpdated": "2026-10-13T16:53:58.068Z" - }, - { - "cveId": "CVE-2026-109344", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109344", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109344.json", - "dateUpdated": "2026-10-13T16:53:48.747Z" - }, - { - "cveId": "CVE-2026-109349", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109349", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109349.json", - "dateUpdated": "2026-10-13T16:53:40.906Z" - }, - { - "cveId": "CVE-2026-109354", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109354", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109354.json", - "dateUpdated": "2026-10-13T16:53:32.764Z" - }, - { - "cveId": "CVE-2026-109359", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109359", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109359.json", - "dateUpdated": "2026-10-13T16:53:24.261Z" - }, - { - "cveId": "CVE-2026-109364", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109364", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109364.json", - "dateUpdated": "2026-10-13T16:53:12.902Z" - }, - { - "cveId": "CVE-2026-109373", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109373", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109373.json", - "dateUpdated": "2026-10-13T16:53:01.016Z" - }, - { - "cveId": "CVE-2026-109379", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109379", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109379.json", - "dateUpdated": "2026-10-13T16:52:23.847Z" - }, - { - "cveId": "CVE-2026-109391", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109391", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109391.json", - "dateUpdated": "2026-10-13T16:57:23.986Z" - }, - { - "cveId": "CVE-2026-109397", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109397", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109397.json", - "dateUpdated": "2026-10-13T16:57:16.106Z" - }, - { - "cveId": "CVE-2026-109425", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109425", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109425.json", - "dateUpdated": "2026-10-13T16:52:52.839Z" - }, - { - "cveId": "CVE-2026-109559", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109559", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109559.json", - "dateUpdated": "2026-10-13T16:52:15.376Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-13T16:50:59.352Z", - "numberOfChanges": 47, - "new": [ - { - "cveId": "CVE-2026-104126", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104126", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104126.json", - "dateUpdated": "2026-10-13T16:36:23.801Z" - }, - { - "cveId": "CVE-2026-109827", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109827", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109827.json", - "dateUpdated": "2026-10-13T16:45:16.965Z" - }, - { - "cveId": "CVE-2026-19939", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19939", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19939.json", - "dateUpdated": "2026-10-13T16:39:16.681Z" - }, - { - "cveId": "CVE-2026-19940", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19940", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19940.json", - "dateUpdated": "2026-10-13T16:40:10.541Z" - }, - { - "cveId": "CVE-2026-55823", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55823", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55823.json", - "dateUpdated": "2026-10-13T16:49:28.128Z" - }, - { - "cveId": "CVE-2026-66057", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66057", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66057.json", - "dateUpdated": "2026-10-13T16:48:03.798Z" - } - ], - "updated": [ - { - "cveId": "CVE-2023-54408", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-54408", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/54xxx/CVE-2023-54408.json", - "dateUpdated": "2026-10-13T16:46:27.105Z" - }, - { - "cveId": "CVE-2024-58390", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-58390", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/58xxx/CVE-2024-58390.json", - "dateUpdated": "2026-10-13T16:46:20.450Z" - }, - { - "cveId": "CVE-2026-107889", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107889", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107889.json", - "dateUpdated": "2026-10-13T16:46:42.565Z" - }, - { - "cveId": "CVE-2026-107917", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107917", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107917.json", - "dateUpdated": "2026-10-13T16:45:49.554Z" - }, - { - "cveId": "CVE-2026-107918", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107918", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107918.json", - "dateUpdated": "2026-10-13T16:47:00.465Z" - }, - { - "cveId": "CVE-2026-108101", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108101", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108101.json", - "dateUpdated": "2026-10-13T16:49:37.876Z" - }, - { - "cveId": "CVE-2026-109564", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109564", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109564.json", - "dateUpdated": "2026-10-13T16:46:42.257Z" - }, - { - "cveId": "CVE-2026-109569", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109569", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109569.json", - "dateUpdated": "2026-10-13T16:46:33.737Z" - }, - { - "cveId": "CVE-2026-109572", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109572", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109572.json", - "dateUpdated": "2026-10-13T16:46:13.259Z" - }, - { - "cveId": "CVE-2026-109597", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109597", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109597.json", - "dateUpdated": "2026-10-13T16:46:06.110Z" - }, - { - "cveId": "CVE-2026-109602", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109602", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109602.json", - "dateUpdated": "2026-10-13T16:45:58.408Z" - }, - { - "cveId": "CVE-2026-109610", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109610", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109610.json", - "dateUpdated": "2026-10-13T16:45:51.673Z" - }, - { - "cveId": "CVE-2026-109615", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109615", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109615.json", - "dateUpdated": "2026-10-13T16:45:45.066Z" - }, - { - "cveId": "CVE-2026-109623", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109623", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109623.json", - "dateUpdated": "2026-10-13T16:45:37.950Z" - }, - { - "cveId": "CVE-2026-109628", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109628", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109628.json", - "dateUpdated": "2026-10-13T16:45:31.420Z" - }, - { - "cveId": "CVE-2026-109633", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109633", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109633.json", - "dateUpdated": "2026-10-13T16:45:24.542Z" - }, - { - "cveId": "CVE-2026-109638", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109638", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109638.json", - "dateUpdated": "2026-10-13T16:45:17.678Z" - }, - { - "cveId": "CVE-2026-109643", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109643", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109643.json", - "dateUpdated": "2026-10-13T16:45:11.413Z" - }, - { - "cveId": "CVE-2026-109648", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109648", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109648.json", - "dateUpdated": "2026-10-13T16:45:02.830Z" - }, - { - "cveId": "CVE-2026-109653", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109653", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109653.json", - "dateUpdated": "2026-10-13T16:44:54.431Z" - }, - { - "cveId": "CVE-2026-109658", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109658", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109658.json", - "dateUpdated": "2026-10-13T16:44:47.281Z" - }, - { - "cveId": "CVE-2026-109663", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109663", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109663.json", - "dateUpdated": "2026-10-13T16:44:40.041Z" - }, - { - "cveId": "CVE-2026-109668", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109668", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109668.json", - "dateUpdated": "2026-10-13T16:44:32.720Z" - }, - { - "cveId": "CVE-2026-109673", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109673", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109673.json", - "dateUpdated": "2026-10-13T16:44:26.170Z" - }, - { - "cveId": "CVE-2026-109677", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109677", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109677.json", - "dateUpdated": "2026-10-13T16:44:19.613Z" - }, - { - "cveId": "CVE-2026-109939", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109939", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109939.json", - "dateUpdated": "2026-10-13T16:44:12.625Z" - }, - { - "cveId": "CVE-2026-109944", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109944", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109944.json", - "dateUpdated": "2026-10-13T16:44:06.124Z" - }, - { - "cveId": "CVE-2026-109949", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109949", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109949.json", - "dateUpdated": "2026-10-13T16:43:58.209Z" - }, - { - "cveId": "CVE-2026-109954", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109954", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109954.json", - "dateUpdated": "2026-10-13T16:43:51.636Z" - }, - { - "cveId": "CVE-2026-109959", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109959", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109959.json", - "dateUpdated": "2026-10-13T16:43:44.609Z" - }, - { - "cveId": "CVE-2026-109964", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109964", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109964.json", - "dateUpdated": "2026-10-13T16:43:16.967Z" - }, - { - "cveId": "CVE-2026-11730", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-11730", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11730.json", - "dateUpdated": "2026-10-13T16:40:22.452Z" - }, - { - "cveId": "CVE-2026-11731", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-11731", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11731.json", - "dateUpdated": "2026-10-13T16:42:14.282Z" - }, - { - "cveId": "CVE-2026-11732", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-11732", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11732.json", - "dateUpdated": "2026-10-13T16:43:43.027Z" - }, - { - "cveId": "CVE-2026-74030", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-74030", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74030.json", - "dateUpdated": "2026-10-13T16:43:37.400Z" - }, - { - "cveId": "CVE-2026-74035", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-74035", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74035.json", - "dateUpdated": "2026-10-13T16:43:30.956Z" - }, - { - "cveId": "CVE-2026-74043", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-74043", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74043.json", - "dateUpdated": "2026-10-13T16:43:23.732Z" - }, - { - "cveId": "CVE-2026-78015", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78015", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78015.json", - "dateUpdated": "2026-10-13T16:47:41.960Z" - }, - { - "cveId": "CVE-2026-78025", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78025", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78025.json", - "dateUpdated": "2026-10-13T16:48:31.679Z" - }, - { - "cveId": "CVE-2026-83536", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83536", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83536.json", - "dateUpdated": "2026-10-13T16:36:36.948Z" - }, - { - "cveId": "CVE-2026-9218", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-9218", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9218.json", - "dateUpdated": "2026-10-13T16:36:50.310Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-13T16:36:05.384Z", - "numberOfChanges": 57, - "new": [ - { - "cveId": "CVE-2026-103030", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103030", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103030.json", - "dateUpdated": "2026-10-13T16:31:34.989Z" - }, - { - "cveId": "CVE-2026-104250", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104250", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104250.json", - "dateUpdated": "2026-10-13T16:29:28.813Z" - }, - { - "cveId": "CVE-2026-106043", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106043", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106043.json", - "dateUpdated": "2026-10-13T16:17:58.955Z" - }, - { - "cveId": "CVE-2026-106047", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106047", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106047.json", - "dateUpdated": "2026-10-13T16:19:39.517Z" - }, - { - "cveId": "CVE-2026-109412", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109412", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109412.json", - "dateUpdated": "2026-10-13T16:23:41.494Z" - }, - { - "cveId": "CVE-2026-109620", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109620", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109620.json", - "dateUpdated": "2026-10-13T16:30:20.191Z" - }, - { - "cveId": "CVE-2026-109890", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109890", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109890.json", - "dateUpdated": "2026-10-13T16:21:41.913Z" - }, - { - "cveId": "CVE-2026-109896", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109896", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109896.json", - "dateUpdated": "2026-10-13T16:23:07.325Z" - }, - { - "cveId": "CVE-2026-109898", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109898", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109898.json", - "dateUpdated": "2026-10-13T16:23:02.576Z" - }, - { - "cveId": "CVE-2026-54454", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-54454", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54454.json", - "dateUpdated": "2026-10-13T16:33:49.786Z" - }, - { - "cveId": "CVE-2026-55183", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55183", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55183.json", - "dateUpdated": "2026-10-13T16:19:53.382Z" - }, - { - "cveId": "CVE-2026-55562", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55562", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55562.json", - "dateUpdated": "2026-10-13T16:18:55.780Z" - }, - { - "cveId": "CVE-2026-61642", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61642", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61642.json", - "dateUpdated": "2026-10-13T16:29:37.325Z" - }, - { - "cveId": "CVE-2026-77459", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-77459", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/77xxx/CVE-2026-77459.json", - "dateUpdated": "2026-10-13T16:26:47.088Z" - }, - { - "cveId": "CVE-2026-78799", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78799", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78799.json", - "dateUpdated": "2026-10-13T16:26:41.075Z" - }, - { - "cveId": "CVE-2026-82416", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82416", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82416.json", - "dateUpdated": "2026-10-13T16:20:53.439Z" - }, - { - "cveId": "CVE-2026-85733", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85733", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85733.json", - "dateUpdated": "2026-10-13T16:23:07.177Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-102074", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102074", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102074.json", - "dateUpdated": "2026-10-13T16:20:06.784Z" - }, - { - "cveId": "CVE-2026-102076", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102076", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102076.json", - "dateUpdated": "2026-10-13T16:20:06.658Z" - }, - { - "cveId": "CVE-2026-102250", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102250", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102250.json", - "dateUpdated": "2026-10-13T16:20:06.528Z" - }, - { - "cveId": "CVE-2026-102982", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102982", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102982.json", - "dateUpdated": "2026-10-13T16:21:12.046Z" - }, - { - "cveId": "CVE-2026-103965", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103965", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103965.json", - "dateUpdated": "2026-10-13T16:20:06.145Z" - }, - { - "cveId": "CVE-2026-104102", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104102", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104102.json", - "dateUpdated": "2026-10-13T16:31:17.851Z" - }, - { - "cveId": "CVE-2026-107717", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107717", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107717.json", - "dateUpdated": "2026-10-13T16:16:13.460Z" - }, - { - "cveId": "CVE-2026-107722", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107722", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107722.json", - "dateUpdated": "2026-10-13T16:26:25.790Z" - }, - { - "cveId": "CVE-2026-107727", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107727", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107727.json", - "dateUpdated": "2026-10-13T16:27:25.353Z" - }, - { - "cveId": "CVE-2026-107732", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107732", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107732.json", - "dateUpdated": "2026-10-13T16:28:47.961Z" - }, - { - "cveId": "CVE-2026-107737", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107737", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107737.json", - "dateUpdated": "2026-10-13T16:28:11.204Z" - }, - { - "cveId": "CVE-2026-107890", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107890", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107890.json", - "dateUpdated": "2026-10-13T16:33:21.155Z" - }, - { - "cveId": "CVE-2026-108907", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108907", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108907.json", - "dateUpdated": "2026-10-13T16:24:18.568Z" - }, - { - "cveId": "CVE-2026-108915", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108915", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108915.json", - "dateUpdated": "2026-10-13T16:25:29.040Z" - }, - { - "cveId": "CVE-2026-108919", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108919", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108919.json", - "dateUpdated": "2026-10-13T16:26:29.600Z" - }, - { - "cveId": "CVE-2026-109348", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109348", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109348.json", - "dateUpdated": "2026-10-13T16:16:02.083Z" - }, - { - "cveId": "CVE-2026-109353", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109353", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109353.json", - "dateUpdated": "2026-10-13T16:19:23.695Z" - }, - { - "cveId": "CVE-2026-109358", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109358", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109358.json", - "dateUpdated": "2026-10-13T16:20:40.392Z" - }, - { - "cveId": "CVE-2026-109363", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109363", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109363.json", - "dateUpdated": "2026-10-13T16:22:00.063Z" - }, - { - "cveId": "CVE-2026-109372", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109372", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109372.json", - "dateUpdated": "2026-10-13T16:23:38.085Z" - }, - { - "cveId": "CVE-2026-32574", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-32574", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32574.json", - "dateUpdated": "2026-10-13T16:35:59.917Z" - }, - { - "cveId": "CVE-2026-33818", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33818", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33818.json", - "dateUpdated": "2026-10-13T16:30:58.776Z" - }, - { - "cveId": "CVE-2026-39785", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-39785", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39785.json", - "dateUpdated": "2026-10-13T16:31:43.279Z" - }, - { - "cveId": "CVE-2026-42504", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42504", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42504.json", - "dateUpdated": "2026-10-13T16:30:57.445Z" - }, - { - "cveId": "CVE-2026-42702", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42702", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42702.json", - "dateUpdated": "2026-10-13T16:32:55.073Z" - }, - { - "cveId": "CVE-2026-49265", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-49265", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/49xxx/CVE-2026-49265.json", - "dateUpdated": "2026-10-13T16:19:39.092Z" - }, - { - "cveId": "CVE-2026-55675", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55675", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55675.json", - "dateUpdated": "2026-10-13T16:22:51.021Z" - }, - { - "cveId": "CVE-2026-59976", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59976", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59976.json", - "dateUpdated": "2026-10-13T16:34:38.483Z" - }, - { - "cveId": "CVE-2026-63351", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63351", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63351.json", - "dateUpdated": "2026-10-13T16:20:07.526Z" - }, - { - "cveId": "CVE-2026-63356", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63356", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63356.json", - "dateUpdated": "2026-10-13T16:20:07.401Z" - }, - { - "cveId": "CVE-2026-75345", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75345", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75345.json", - "dateUpdated": "2026-10-13T16:31:53.464Z" - }, - { - "cveId": "CVE-2026-75347", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75347", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75347.json", - "dateUpdated": "2026-10-13T16:30:35.421Z" - }, - { - "cveId": "CVE-2026-89199", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89199", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89199.json", - "dateUpdated": "2026-10-13T16:20:07.271Z" - }, - { - "cveId": "CVE-2026-89204", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89204", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89204.json", - "dateUpdated": "2026-10-13T16:20:07.151Z" - }, - { - "cveId": "CVE-2026-89206", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89206", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89206.json", - "dateUpdated": "2026-10-13T16:20:07.016Z" - }, - { - "cveId": "CVE-2026-89208", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89208", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89208.json", - "dateUpdated": "2026-10-13T16:20:06.901Z" - }, - { - "cveId": "CVE-2026-96297", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96297", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96297.json", - "dateUpdated": "2026-10-13T16:20:06.406Z" - }, - { - "cveId": "CVE-2026-96299", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96299", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96299.json", - "dateUpdated": "2026-10-13T16:31:19.871Z" - }, - { - "cveId": "CVE-2026-9215", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-9215", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9215.json", - "dateUpdated": "2026-10-13T16:33:16.019Z" - }, - { - "cveId": "CVE-2026-9216", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-9216", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9216.json", - "dateUpdated": "2026-10-13T16:31:50.469Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 7d75e793c0..b5f8ffb445 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "49cd4a7173467821e8f2b0c98cb0598f8faf63de", + "upstream_commit": "d3c3ef38e967bd4cc0be28ceba0588a49ec2486d", "since_year": 2017, - "records": 331620, - "synced_at_utc": "2026-11-12T16:26:13.736746+00:00" + "records": 331642, + "synced_at_utc": "2026-11-12T17:26:53.155430+00:00" }