diff --git a/data/2026/106xxx/CVE-2026-106140.json b/data/2026/106xxx/CVE-2026-106140.json
new file mode 100644
index 0000000000..eb1bc68e77
--- /dev/null
+++ b/data/2026/106xxx/CVE-2026-106140.json
@@ -0,0 +1,112 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-106140",
+        "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+        "state": "PUBLISHED",
+        "assignerShortName": "ProgressSoftware",
+        "dateReserved": "2026-10-06T15:51:10.391Z",
+        "datePublished": "2026-11-12T09:42:29.085Z",
+        "dateUpdated": "2026-11-12T09:42:29.085Z"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+                "shortName": "ProgressSoftware",
+                "dateUpdated": "2026-11-12T09:42:29.085Z"
+            },
+            "title": "Deserialization of Untrusted Data in Telerik Reporting Report Designers",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "cweId": "CWE-502",
+                            "description": "CWE-502 Deserialization of Untrusted Data",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "impacts": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "value": "Object Injection"
+                        }
+                    ]
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "Progress Software",
+                    "product": "Telerik Reporting",
+                    "versions": [
+                        {
+                            "status": "affected",
+                            "version": "0",
+                            "lessThan": "20.3.26.1110",
+                            "versionType": "custom"
+                        }
+                    ],
+                    "defaultStatus": "unaffected"
+                }
+            ],
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report designers allows a local attacker with low privileges to execute arbitrary code in the context of the designer process when the user performs certain editing operations.",
+                    "supportingMedia": [
+                        {
+                            "type": "text/html",
+                            "base64": false,
+                            "value": "<p>In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report designers allows a local attacker with low privileges to execute arbitrary code in the context of the designer process when the user performs certain editing operations.</p>"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://www.telerik.com/products/reporting/documentation/knowledge-base/kb-security-deserialization-of-untrusted-data-cve-2026-106140",
+                    "tags": [
+                        "vendor-advisory"
+                    ]
+                }
+            ],
+            "metrics": [
+                {
+                    "format": "CVSS",
+                    "scenarios": [
+                        {
+                            "lang": "en",
+                            "value": "GENERAL"
+                        }
+                    ],
+                    "cvssV3_1": {
+                        "version": "3.1",
+                        "attackVector": "LOCAL",
+                        "attackComplexity": "LOW",
+                        "privilegesRequired": "LOW",
+                        "userInteraction": "REQUIRED",
+                        "scope": "UNCHANGED",
+                        "confidentialityImpact": "HIGH",
+                        "integrityImpact": "HIGH",
+                        "availabilityImpact": "HIGH",
+                        "baseSeverity": "HIGH",
+                        "baseScore": 7.3,
+                        "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
+                    }
+                }
+            ],
+            "source": {
+                "discovery": "INTERNAL"
+            },
+            "x_generator": {
+                "engine": "Vulnogram 0.2.0"
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/data/2026/117xxx/CVE-2026-117474.json b/data/2026/117xxx/CVE-2026-117474.json
new file mode 100644
index 0000000000..1559da8e6d
--- /dev/null
+++ b/data/2026/117xxx/CVE-2026-117474.json
@@ -0,0 +1,28 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-117474",
+        "assignerOrgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
+        "state": "REJECTED",
+        "dateReserved": "2026-10-27T06:13:45.480Z",
+        "dateUpdated": "2026-11-12T09:45:55.687Z",
+        "dateRejected": "2026-11-12T09:45:55.687Z",
+        "assignerShortName": "synology"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
+                "shortName": "synology",
+                "dateUpdated": "2026-11-12T09:45:55.687Z"
+            },
+            "rejectedReasons": [
+                {
+                    "lang": "en",
+                    "value": "none"
+                }
+            ]
+        }
+    }
+}
\ No newline at end of file
diff --git a/data/2026/117xxx/CVE-2026-117475.json b/data/2026/117xxx/CVE-2026-117475.json
new file mode 100644
index 0000000000..143cb36b0f
--- /dev/null
+++ b/data/2026/117xxx/CVE-2026-117475.json
@@ -0,0 +1,28 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-117475",
+        "assignerOrgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
+        "state": "REJECTED",
+        "dateReserved": "2026-10-27T06:13:50.592Z",
+        "dateUpdated": "2026-11-12T09:45:44.158Z",
+        "dateRejected": "2026-11-12T09:45:44.158Z",
+        "assignerShortName": "synology"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
+                "shortName": "synology",
+                "dateUpdated": "2026-11-12T09:45:44.158Z"
+            },
+            "rejectedReasons": [
+                {
+                    "lang": "en",
+                    "value": "none"
+                }
+            ]
+        }
+    }
+}
\ No newline at end of file
diff --git a/data/2026/117xxx/CVE-2026-117476.json b/data/2026/117xxx/CVE-2026-117476.json
new file mode 100644
index 0000000000..866e34570e
--- /dev/null
+++ b/data/2026/117xxx/CVE-2026-117476.json
@@ -0,0 +1,28 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-117476",
+        "assignerOrgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
+        "state": "REJECTED",
+        "dateReserved": "2026-10-27T06:13:55.580Z",
+        "dateUpdated": "2026-11-12T09:45:29.828Z",
+        "dateRejected": "2026-11-12T09:45:29.828Z",
+        "assignerShortName": "synology"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
+                "shortName": "synology",
+                "dateUpdated": "2026-11-12T09:45:29.828Z"
+            },
+            "rejectedReasons": [
+                {
+                    "lang": "en",
+                    "value": "none"
+                }
+            ]
+        }
+    }
+}
\ No newline at end of file
diff --git a/data/2026/118xxx/CVE-2026-118975.json b/data/2026/118xxx/CVE-2026-118975.json
new file mode 100644
index 0000000000..c48a19f7cb
--- /dev/null
+++ b/data/2026/118xxx/CVE-2026-118975.json
@@ -0,0 +1,119 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-118975",
+        "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+        "state": "PUBLISHED",
+        "assignerShortName": "ProgressSoftware",
+        "dateReserved": "2026-10-29T09:13:28.409Z",
+        "datePublished": "2026-11-12T09:47:53.694Z",
+        "dateUpdated": "2026-11-12T09:47:53.694Z"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+                "shortName": "ProgressSoftware",
+                "dateUpdated": "2026-11-12T09:47:53.694Z"
+            },
+            "title": "XML External Entity (XXE) Injection in Telerik Reporting SVG Processing",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "cweId": "CWE-611",
+                            "description": "CWE-611 Improper Restriction of XML External Entity Reference",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "impacts": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "value": "Serialized Data External Linking"
+                        }
+                    ]
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "Progress Software",
+                    "product": "Telerik Reporting",
+                    "versions": [
+                        {
+                            "status": "affected",
+                            "version": "0",
+                            "lessThan": "20.3.26.1110",
+                            "versionType": "custom"
+                        }
+                    ],
+                    "defaultStatus": "unaffected"
+                }
+            ],
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "In Progress® Telerik® Reporting prior to version 20.3.26.1110, improper restriction of XML external entity references in the SVG processing engine allows an authenticated attacker with low privileges who can supply SVG content to a report to read local or UNC files, or trigger server-side network requests, from the report rendering host. External XML entities in SVG content were resolved without applying the configured strict resource resolver and report path validation. Disclosed content is limited by the permissions of the rendering process and by what the rendered report output exposes.",
+                    "supportingMedia": [
+                        {
+                            "type": "text/html",
+                            "base64": false,
+                            "value": "<p>In Progress® Telerik® Reporting prior to version 20.3.26.1110, improper restriction of XML external entity references in the SVG processing engine allows an authenticated attacker with low privileges who can supply SVG content to a report to read local or UNC files, or trigger server-side network requests, from the report rendering host. External XML entities in SVG content were resolved without applying the configured strict resource resolver and report path validation. Disclosed content is limited by the permissions of the rendering process and by what the rendered report output exposes.</p>"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://www.telerik.com/products/reporting/documentation/knowledge-base/kb-security-improper-restriction-of-xml-external-entity-reference-cve-2026-118975",
+                    "tags": [
+                        "vendor-advisory"
+                    ]
+                }
+            ],
+            "metrics": [
+                {
+                    "format": "CVSS",
+                    "scenarios": [
+                        {
+                            "lang": "en",
+                            "value": "GENERAL"
+                        }
+                    ],
+                    "cvssV3_1": {
+                        "version": "3.1",
+                        "attackVector": "NETWORK",
+                        "attackComplexity": "LOW",
+                        "privilegesRequired": "LOW",
+                        "userInteraction": "NONE",
+                        "scope": "UNCHANGED",
+                        "confidentialityImpact": "HIGH",
+                        "integrityImpact": "NONE",
+                        "availabilityImpact": "NONE",
+                        "baseSeverity": "MEDIUM",
+                        "baseScore": 6.5,
+                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+                    }
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Abhishek Nandkumar Bhaskar (Abhi-Hackz)",
+                    "type": "finder"
+                }
+            ],
+            "source": {
+                "discovery": "EXTERNAL"
+            },
+            "x_generator": {
+                "engine": "Vulnogram 0.2.0"
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/data/2026/119xxx/CVE-2026-119618.json b/data/2026/119xxx/CVE-2026-119618.json
index f134f3c049..0ba39f320d 100644
--- a/data/2026/119xxx/CVE-2026-119618.json
+++ b/data/2026/119xxx/CVE-2026-119618.json
@@ -8,7 +8,7 @@
         "assignerShortName": "apache",
         "dateReserved": "2026-10-30T12:32:13.904Z",
         "datePublished": "2026-11-11T14:54:08.155Z",
-        "dateUpdated": "2026-11-11T19:05:06.932Z"
+        "dateUpdated": "2026-11-12T09:30:48.936Z"
     },
     "containers": {
         "cna": {
@@ -115,16 +115,34 @@
         },
         "adp": [
             {
-                "title": "CVE Program Container",
-                "references": [
-                    {
-                        "url": "http://www.openwall.com/lists/oss-security/2026/11/11/13"
-                    }
-                ],
                 "providerMetadata": {
                     "orgId": "af854a3a-2127-422b-91ae-364da2661108",
                     "shortName": "CVE",
-                    "dateUpdated": "2026-11-11T19:05:06.932Z"
+                    "dateUpdated": "2026-11-12T09:30:48.936Z"
+                },
+                "references": [
+                    {
+                        "url": "http://www.openwall.com/lists/oss-security/2026/11/11/13"
+                    },
+                    {
+                        "url": "https://access.redhat.com/security/cve/cve-2026-119618"
+                    },
+                    {
+                        "url": "https://www.wiz.io/blog/cve-2026-119618-rce-apache-http-server-vulnerability"
+                    },
+                    {
+                        "url": "https://github.com/microsoft/azurelinux/pull/20165"
+                    },
+                    {
+                        "url": "https://bugs.gentoo.org/986161"
+                    },
+                    {
+                        "url": "https://github.com/AlmaLinux/updates/issues/4252"
+                    }
+                ],
+                "title": "CVE Program Container",
+                "x_generator": {
+                    "engine": "ADPogram 0.0.1"
                 }
             }
         ]
diff --git a/data/2026/123xxx/CVE-2026-123765.json b/data/2026/123xxx/CVE-2026-123765.json
new file mode 100644
index 0000000000..48dfcf6dd5
--- /dev/null
+++ b/data/2026/123xxx/CVE-2026-123765.json
@@ -0,0 +1,121 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-123765",
+        "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+        "state": "PUBLISHED",
+        "assignerShortName": "apache",
+        "dateReserved": "2026-11-06T13:49:16.295Z",
+        "datePublished": "2026-11-12T10:03:02.512Z",
+        "dateUpdated": "2026-11-12T10:08:33.965Z"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+                "shortName": "apache",
+                "dateUpdated": "2026-11-12T10:03:02.512Z"
+            },
+            "title": "Apache Sling XSS: xssAPI.getStyleToken() accepts markup in unquoted urls.",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "description": "CWE-79 Improper neutralization of input during web page generation ('cross-site scripting')",
+                            "lang": "en",
+                            "cweId": "CWE-79",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "source": {
+                "defect": [
+                    "SLING-13406"
+                ],
+                "discovery": "UNKNOWN"
+            },
+            "affected": [
+                {
+                    "vendor": "Apache Software Foundation",
+                    "product": "Apache Sling XSS",
+                    "packageURL": "pkg:maven/org.apache.sling/org.apache.sling.xss",
+                    "versions": [
+                        {
+                            "status": "affected",
+                            "version": "0",
+                            "lessThan": "2.4.14",
+                            "versionType": "semver"
+                        }
+                    ],
+                    "defaultStatus": "unaffected",
+                    "collectionURL": "https://repo.maven.apache.org/maven2",
+                    "packageName": "org.apache.sling:org.apache.sling.xss"
+                }
+            ],
+            "descriptions": [
+                {
+                    "value": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. xssAPI.getStyleToken() accepts markup in unquoted urls.\n\n\n\nThis issue affects Apache Sling XSS: before 2.4.14.\n\n\n\nUsers are recommended to upgrade to version 2.4.14, which fixes the issue.",
+                    "lang": "en",
+                    "supportingMedia": [
+                        {
+                            "type": "text/html",
+                            "base64": false,
+                            "value": "<p>Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. xssAPI.getStyleToken() accepts markup in unquoted urls.</p><p>This issue affects Apache Sling XSS: before 2.4.14.</p><p>Users are recommended to upgrade to version 2.4.14, which fixes the issue.</p>"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://lists.apache.org/thread.html/ddvvg034rwqpnsqz8sw0rldyqqoh9c92",
+                    "tags": [
+                        "vendor-advisory"
+                    ]
+                }
+            ],
+            "metrics": [
+                {
+                    "other": {
+                        "type": "Textual description of severity",
+                        "content": {
+                            "text": "low"
+                        }
+                    },
+                    "scenarios": [
+                        {
+                            "lang": "en",
+                            "value": "GENERAL"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Github user @dpfkdlemtp",
+                    "type": "reporter"
+                }
+            ],
+            "x_generator": {
+                "engine": "Vulnogram 1.0.3"
+            }
+        },
+        "adp": [
+            {
+                "title": "CVE Program Container",
+                "references": [
+                    {
+                        "url": "http://www.openwall.com/lists/oss-security/2026/11/11/22"
+                    }
+                ],
+                "providerMetadata": {
+                    "orgId": "af854a3a-2127-422b-91ae-364da2661108",
+                    "shortName": "CVE",
+                    "dateUpdated": "2026-11-12T10:08:33.965Z"
+                }
+            }
+        ]
+    }
+}
\ No newline at end of file
diff --git a/data/2026/124xxx/CVE-2026-124617.json b/data/2026/124xxx/CVE-2026-124617.json
new file mode 100644
index 0000000000..09390135b6
--- /dev/null
+++ b/data/2026/124xxx/CVE-2026-124617.json
@@ -0,0 +1,28 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-124617",
+        "assignerOrgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
+        "state": "REJECTED",
+        "dateReserved": "2026-11-09T06:45:01.637Z",
+        "dateUpdated": "2026-11-12T09:21:07.119Z",
+        "dateRejected": "2026-11-12T09:21:07.119Z",
+        "assignerShortName": "synology"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
+                "shortName": "synology",
+                "dateUpdated": "2026-11-12T09:21:07.119Z"
+            },
+            "rejectedReasons": [
+                {
+                    "lang": "en",
+                    "value": "歸類為 JSONCPP Open Source 之問題"
+                }
+            ]
+        }
+    }
+}
\ No newline at end of file
diff --git a/data/2026/124xxx/CVE-2026-124699.json b/data/2026/124xxx/CVE-2026-124699.json
new file mode 100644
index 0000000000..ed4246c9a4
--- /dev/null
+++ b/data/2026/124xxx/CVE-2026-124699.json
@@ -0,0 +1,113 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-124699",
+        "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+        "state": "PUBLISHED",
+        "assignerShortName": "ProgressSoftware",
+        "dateReserved": "2026-11-09T10:41:43.933Z",
+        "datePublished": "2026-11-12T09:56:54.423Z",
+        "dateUpdated": "2026-11-12T09:56:54.423Z"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+                "shortName": "ProgressSoftware",
+                "dateUpdated": "2026-11-12T09:56:54.423Z"
+            },
+            "title": "Improper Control of Generation of Code in Progress Telerik UI for WinForms",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "cweId": "CWE-94",
+                            "description": "CWE-94 Improper Control of Generation of Code",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "impacts": [
+                {
+                    "capecId": "CAPEC-242",
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "value": "CAPEC-242 Code Injection"
+                        }
+                    ]
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "Progress Software",
+                    "product": "Telerik UI for WinForms",
+                    "versions": [
+                        {
+                            "status": "affected",
+                            "version": "2026.3.1007",
+                            "lessThan": "2026.4.1111",
+                            "versionType": "custom"
+                        }
+                    ],
+                    "defaultStatus": "unaffected"
+                }
+            ],
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "In Telerik UI for WinForms, versions prior to 2026.4.1111, an improper control of code generation vulnerability exists that allows an attacker to supply a crafted expression and execute unauthorized code in the context of the affected application.",
+                    "supportingMedia": [
+                        {
+                            "type": "text/html",
+                            "base64": false,
+                            "value": "In Telerik UI for WinForms, versions prior to 2026.4.1111, an improper control of code generation vulnerability exists that allows an attacker to supply a crafted expression and execute unauthorized code in the context of the affected application."
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://www.telerik.com/products/winforms/documentation/knowledge-base/kb-security-improper-control-of-generation-of-code-cve-2026-124699",
+                    "tags": [
+                        "vendor-advisory"
+                    ]
+                }
+            ],
+            "metrics": [
+                {
+                    "format": "CVSS",
+                    "scenarios": [
+                        {
+                            "lang": "en",
+                            "value": "GENERAL"
+                        }
+                    ],
+                    "cvssV3_1": {
+                        "version": "3.1",
+                        "attackVector": "LOCAL",
+                        "attackComplexity": "LOW",
+                        "privilegesRequired": "NONE",
+                        "userInteraction": "REQUIRED",
+                        "scope": "UNCHANGED",
+                        "confidentialityImpact": "HIGH",
+                        "integrityImpact": "HIGH",
+                        "availabilityImpact": "HIGH",
+                        "baseSeverity": "HIGH",
+                        "baseScore": 7.8,
+                        "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+                    }
+                }
+            ],
+            "source": {
+                "discovery": "INTERNAL"
+            },
+            "x_generator": {
+                "engine": "Vulnogram 0.2.0"
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/data/2026/126xxx/CVE-2026-126255.json b/data/2026/126xxx/CVE-2026-126255.json
index 5a5405d797..4e300a605d 100644
--- a/data/2026/126xxx/CVE-2026-126255.json
+++ b/data/2026/126xxx/CVE-2026-126255.json
@@ -8,7 +8,7 @@
         "assignerShortName": "fortinet",
         "dateReserved": "2026-11-10T20:09:59.145Z",
         "datePublished": "2026-11-11T21:31:52.405Z",
-        "dateUpdated": "2026-11-11T21:31:52.405Z"
+        "dateUpdated": "2026-11-12T09:46:57.536Z"
     },
     "containers": {
         "cna": {
@@ -161,7 +161,7 @@
             "providerMetadata": {
                 "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
                 "shortName": "fortinet",
-                "dateUpdated": "2026-11-11T21:31:52.405Z"
+                "dateUpdated": "2026-11-12T09:46:57.536Z"
             },
             "problemTypes": [
                 {
diff --git a/data/2026/127xxx/CVE-2026-127016.json b/data/2026/127xxx/CVE-2026-127016.json
new file mode 100644
index 0000000000..4b47917da2
--- /dev/null
+++ b/data/2026/127xxx/CVE-2026-127016.json
@@ -0,0 +1,318 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-127016",
+        "assignerOrgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
+        "state": "PUBLISHED",
+        "assignerShortName": "CIRCL",
+        "dateReserved": "2026-11-12T09:45:10.065Z",
+        "datePublished": "2026-11-12T09:45:17.779Z",
+        "dateUpdated": "2026-11-12T09:49:48.735Z"
+    },
+    "containers": {
+        "cna": {
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "The MISP Modules website component exposes external tool management endpoints (add, delete, change status, and change configuration) that did not enforce the optional administrator authentication policy. When ADMIN_PASSWORD was configured in the application environment, the module configuration endpoints correctly required an authenticated administrator session, but the external tools management handlers processed requests from anonymous users without any authorization check. An unauthenticated attacker with network access to the website could add arbitrary external tools, delete existing tools, toggle their active status, and modify their configurations including API keys and ingestion URLs. This inconsistency allowed bypass of the intended access control for the external tools management functionality. The vulnerability is conditional on ADMIN_PASSWORD being set; installations without an admin password intentionally permit open management access by design. The affected component is the external_tools Flask blueprint within the MISP Modules website application."
+                }
+            ],
+            "affected": [
+                {
+                    "product": "misp-modules",
+                    "cpes": [
+                        "cpe:2.3:a:misp:misp-modules:*:*:*:*:*:*:*:*"
+                    ],
+                    "versions": [
+                        {
+                            "version": "0",
+                            "status": "affected",
+                            "versionType": "semver",
+                            "lessThanOrEqual": "3.1.4"
+                        }
+                    ],
+                    "modules": [
+                        "external_tools"
+                    ],
+                    "programFiles": [
+                        "website/app/external_tools/external_tools.py"
+                    ],
+                    "repo": "https://github.com/MISP/misp-modules",
+                    "vendor": "misp"
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://github.com/MISP/misp-modules/commit/28c27e30f6d3a10e38fe9c54bb52f57ccf70d027",
+                    "name": "Security patch",
+                    "tags": [
+                        "patch"
+                    ]
+                }
+            ],
+            "x_gcve": [
+                {
+                    "recordType": "advisory",
+                    "extensions": {
+                        "bcp-05-x-01": {
+                            "ai_annotations": [
+                                {
+                                    "scope": "record",
+                                    "gna_source": 1,
+                                    "tags": [
+                                        "ai-computer-assisted:llm-generated",
+                                        "ai-computer-assisted:classification"
+                                    ],
+                                    "description": "Draft vulnerability metadata was generated from a git-format patch using an Ollama-hosted language model. Human validation is required before publication.",
+                                    "ai_level": "generated",
+                                    "review_status": "full",
+                                    "models": [
+                                        {
+                                            "name": "qwen3.8:27b",
+                                            "gna_source": 1,
+                                            "source": "ollama",
+                                            "identifier": "qwen3.8:27b"
+                                        }
+                                    ]
+                                }
+                            ]
+                        },
+                        "bcp-05-x-02": {
+                            "x_patch2vuln": {
+                                "generator": "patch2vuln.py",
+                                "generatedAt": "2026-11-12T08:59:10.622852Z",
+                                "model": "qwen3.8:27b",
+                                "source": "https://github.com/MISP/misp-modules/commit/28c27e30f6d3a10e38fe9c54bb52f57ccf70d027.patch",
+                                "patchSha256": "a7fa238950e4db922c8ad604a6abe453385d29b8a6bcc58762a4fe72add73775",
+                                "patchTruncated": false,
+                                "commit": "28c27e30f6d3a10e38fe9c54bb52f57ccf70d027",
+                                "subject": "fix: [website] authorize external tool management",
+                                "patches": [
+                                    {
+                                        "source": "https://github.com/MISP/misp-modules/commit/28c27e30f6d3a10e38fe9c54bb52f57ccf70d027.patch",
+                                        "sourceUrl": "https://github.com/MISP/misp-modules/commit/28c27e30f6d3a10e38fe9c54bb52f57ccf70d027.patch",
+                                        "patchSha256": "a7fa238950e4db922c8ad604a6abe453385d29b8a6bcc58762a4fe72add73775",
+                                        "commit": "28c27e30f6d3a10e38fe9c54bb52f57ccf70d027",
+                                        "subject": "fix: [website] authorize external tool management",
+                                        "date": "Thu, 12 Nov 2026 09:37:23 +0100",
+                                        "retrievedAt": "2026-11-12T08:58:21.777259Z"
+                                    }
+                                ],
+                                "confidence": "medium",
+                                "assumptions": [
+                                    "The CAPEC mapping to CAPEC-1 (Software Feature Discovery) is the closest available pattern; no CAPEC specifically models exploitation of a missing authorization check on a discovered endpoint. The mapping is uncertain but is the best fit given the attack sequence of discovering and then invoking unauthenticated management endpoints.",
+                                    "CVSS SI:H assumes that external tools in MISP feed into a broader data ingestion pipeline whose integrity is affected by unauthorized modification of tool configurations. If external tools are isolated to a single instance with no downstream consumers, SI could be reduced.",
+                                    "The vulnerability is conditional on ADMIN_PASSWORD being configured. Installations without ADMIN_PASSWORD intentionally allow open management access by design and are not considered vulnerable.",
+                                    "No specific version boundaries are identified in the patch; the affected version range is unspecified.",
+                                    "The patch references issue #816 in the MISP/misp-modules repository, but no additional context about the issue tracker entry is available to confirm reporter or finder credits."
+                                ],
+                                "fixSummary": "A before_request authorization handler is added to the external_tools blueprint that checks whether the admin user is active (ADMIN_PASSWORD configured) and whether the current user is authenticated before any management endpoint executes. When both conditions indicate an unauthenticated request to a protected endpoint, the handler redirects to the login page (for the add endpoint) or returns a 403 Permission Denied response (for delete, status, and configuration endpoints). This enforces the same optional-admin policy already applied to module configuration, while preserving the existing open-management behavior when no admin password is configured.",
+                                "patchSummary": "The patch adds a before_request decorator on external_tools_blueprint in website/app/external_tools/external_tools.py that imports current_user from flask_login and admin_user_active from app.utils. The handler checks if the request endpoint is one of the four management endpoints (add_external_tool, delete_tool, change_status, change_config) and if the admin user is active but the current user is not authenticated, it either redirects to the login page or returns a 403 JSON response. The patch also adds a new test file website/tests/external_tools_checks.py with regression tests verifying that anonymous mutations are denied even with valid CSRF tokens, that authorization precedes JSON validation, that authenticated admins can perform all operations, and that the open-management policy is preserved when no admin password is set. The README is updated to document the new authorization requirement.",
+                                "credits": [
+                                    {
+                                        "lang": "en",
+                                        "value": "Alexandre Dulaunoy",
+                                        "type": "remediation developer"
+                                    }
+                                ],
+                                "cvssRationale": "AV:N: The vulnerability is exploitable over the network via HTTP requests to the website. AC:L: No special conditions are required; standard HTTP POST/GET requests to known endpoints suffice. AT:N: No attack target manipulation is needed. PR:N: No privileges are required; the attack works as an anonymous user. UI:N: No user interaction is required. VC:L: Tool configurations including API keys and URLs are accessible/modifiable by the attacker. VI:H: The attacker can add, delete, and modify external tools, fully compromising the integrity of the tool management function. VA:L: Deleting or disabling tools reduces availability of data ingestion. SC:N: No secondary system confidentiality impact identified. SI:H: External tools feed into the broader MISP data pipeline; modifying them can corrupt or redirect data ingestion for the entire MISP instance. SA:N: No secondary availability impact beyond the direct effect.",
+                                "ssvc": {
+                                    "version": "2.0.3",
+                                    "role": "Supplier",
+                                    "timestamp": "2026-11-12T08:59:10Z",
+                                    "options": [
+                                        {
+                                            "Exploitation": "none"
+                                        },
+                                        {
+                                            "Automatable": "yes"
+                                        },
+                                        {
+                                            "Technical Impact": "total"
+                                        }
+                                    ]
+                                },
+                                "weaknessRationale": [
+                                    {
+                                        "cweId": "CWE-862",
+                                        "rationale": "The external tools management endpoints (add, delete, change_status, change_config) lacked an authorization check that would verify the requester is an authenticated administrator when the admin-login policy is active. The authentication mechanism (flask_login, ADMIN_PASSWORD) existed in the application but was not applied to these specific endpoints, allowing anonymous users to perform privileged management operations."
+                                    }
+                                ],
+                                "capecRationale": [
+                                    {
+                                        "capecId": "CAPEC-1",
+                                        "rationale": "The closest available CAPEC pattern is Software Feature Discovery, as the attacker must identify the external tools management endpoints (e.g., /add_external_tool, /external_tools/<id>/delete_tool, /external_tools/change_status, /external_tools/change_config) and then issue unauthenticated requests to them. The vulnerability is exploited by discovering that these management functions are accessible without the authorization that the application's own documentation and parallel module-configuration endpoints imply. No CAPEC specifically models 'missing authorization on a discovered endpoint,' so CAPEC-1 is the best available match for the discovery-and-exploitation sequence."
+                                    }
+                                ],
+                                "draft": false,
+                                "modelComparison": {
+                                    "selectedModel": "qwen3.8:27b",
+                                    "selectionMethod": "deterministic-consensus-v1",
+                                    "selectionNotice": "The selected result is closest to model consensus; this heuristic does not establish factual correctness and human review remains required.",
+                                    "rankings": [
+                                        {
+                                            "model": "qwen3.8:27b",
+                                            "score": 7,
+                                            "agreementScore": 11,
+                                            "confidence": "medium",
+                                            "assumptionCount": 5
+                                        }
+                                    ],
+                                    "potentialErrors": []
+                                }
+                            }
+                        },
+                        "bcp-05-x-03": {
+                            "x_timeline": {
+                                "events": [
+                                    {
+                                        "type": "fix-developed",
+                                        "timestamp": "2026-11-12T08:37:23Z",
+                                        "description": "Corrective change authored (28c27e30f6d3a10e38fe9c54bb52f57ccf70d027): fix: [website] authorize external tool management",
+                                        "references": [
+                                            "https://github.com/MISP/misp-modules/commit/28c27e30f6d3a10e38fe9c54bb52f57ccf70d027.patch"
+                                        ],
+                                        "id": "evt-fix-developed-1"
+                                    },
+                                    {
+                                        "id": "evt-fix-available-1",
+                                        "type": "fix-available",
+                                        "timestamp": "2026-11-12T08:58:21.777259Z",
+                                        "description": "Patch retrieved from the supplied URL; retrieval time is used as the default availability time.",
+                                        "references": [
+                                            "https://github.com/MISP/misp-modules/commit/28c27e30f6d3a10e38fe9c54bb52f57ccf70d027.patch"
+                                        ]
+                                    }
+                                ]
+                            }
+                        }
+                    },
+                    "vulnId": "gcve-1-2026-20323"
+                }
+            ],
+            "title": "MISP Modules Website: Missing Authorization on External Tool Management Endpoints",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "cweId": "CWE-862",
+                            "description": "CWE-862 Missing Authorization",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "metrics": [
+                {
+                    "format": "CVSS",
+                    "scenarios": [
+                        {
+                            "lang": "en",
+                            "value": "GENERAL"
+                        }
+                    ],
+                    "cvssV4_0": {
+                        "version": "4.0",
+                        "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:H/SA:N",
+                        "baseScore": 9.2,
+                        "baseSeverity": "CRITICAL",
+                        "attackVector": "NETWORK",
+                        "attackComplexity": "LOW",
+                        "attackRequirements": "NONE",
+                        "privilegesRequired": "NONE",
+                        "userInteraction": "NONE",
+                        "vulnConfidentialityImpact": "LOW",
+                        "vulnIntegrityImpact": "HIGH",
+                        "vulnAvailabilityImpact": "LOW",
+                        "subConfidentialityImpact": "NONE",
+                        "subIntegrityImpact": "HIGH",
+                        "subAvailabilityImpact": "NONE",
+                        "Safety": "NOT_DEFINED",
+                        "Automatable": "NOT_DEFINED",
+                        "Recovery": "NOT_DEFINED",
+                        "valueDensity": "NOT_DEFINED",
+                        "vulnerabilityResponseEffort": "NOT_DEFINED",
+                        "providerUrgency": "NOT_DEFINED"
+                    }
+                },
+                {
+                    "format": "SSVC",
+                    "scenarios": [
+                        {
+                            "lang": "en",
+                            "value": "GENERAL"
+                        }
+                    ],
+                    "other": {
+                        "type": "SSVC",
+                        "content": {
+                            "version": "2.0.3",
+                            "role": "Supplier",
+                            "timestamp": "2026-11-12T08:59:10Z",
+                            "options": [
+                                {
+                                    "Exploitation": "none"
+                                },
+                                {
+                                    "Automatable": "yes"
+                                },
+                                {
+                                    "Technical Impact": "total"
+                                }
+                            ]
+                        }
+                    }
+                }
+            ],
+            "solutions": [
+                {
+                    "lang": "en",
+                    "value": "A before_request authorization handler is added to the external_tools blueprint that checks whether the admin user is active (ADMIN_PASSWORD configured) and whether the current user is authenticated before any management endpoint executes. When both conditions indicate an unauthenticated request to a protected endpoint, the handler redirects to the login page (for the add endpoint) or returns a 403 Permission Denied response (for delete, status, and configuration endpoints). This enforces the same optional-admin policy already applied to module configuration, while preserving the existing open-management behavior when no admin password is configured."
+                }
+            ],
+            "impacts": [
+                {
+                    "capecId": "CAPEC-1",
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "value": "CAPEC-1 Software Feature Discovery"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Alexandre Dulaunoy",
+                    "type": "remediation developer"
+                }
+            ],
+            "cpeApplicability": [
+                {
+                    "nodes": [
+                        {
+                            "operator": "OR",
+                            "negate": false,
+                            "cpeMatch": [
+                                {
+                                    "vulnerable": true,
+                                    "criteria": "cpe:2.3:a:misp:misp-modules:*:*:*:*:*:*:*:*",
+                                    "versionStartIncluding": "0",
+                                    "versionEndIncluding": "3.1.4"
+                                }
+                            ]
+                        }
+                    ]
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
+                "shortName": "CIRCL",
+                "dateUpdated": "2026-11-12T09:49:48.735Z"
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/data/2026/54xxx/CVE-2026-54825.json b/data/2026/54xxx/CVE-2026-54825.json
index 4d756a2e5e..f510205da3 100644
--- a/data/2026/54xxx/CVE-2026-54825.json
+++ b/data/2026/54xxx/CVE-2026-54825.json
@@ -8,52 +8,43 @@
         "assignerShortName": "Patchstack",
         "dateReserved": "2026-06-16T09:21:51.802Z",
         "datePublished": "2026-06-26T14:52:20.469Z",
-        "dateUpdated": "2026-06-26T15:51:26.440Z"
+        "dateUpdated": "2026-11-12T09:29:26.537Z"
     },
     "containers": {
         "cna": {
             "providerMetadata": {
                 "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
                 "shortName": "Patchstack",
-                "dateUpdated": "2026-06-26T14:52:20.469Z"
+                "dateUpdated": "2026-11-12T09:29:26.537Z"
             },
             "title": "WordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerability",
-            "problemTypes": [
+            "datePublic": "2026-06-17T13:30:10.000Z",
+            "descriptions": [
                 {
-                    "descriptions": [
+                    "lang": "en",
+                    "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS wpDataTables wpdatatables allows Blind SQL Injection.This issue affects wpDataTables: from n/a through 7.4.",
+                    "supportingMedia": [
                         {
-                            "lang": "en",
-                            "cweId": "CWE-89",
-                            "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
-                            "type": "CWE"
-                        }
-                    ]
-                }
-            ],
-            "impacts": [
-                {
-                    "capecId": "CAPEC-7",
-                    "descriptions": [
-                        {
-                            "lang": "en",
-                            "value": "CAPEC-7 Blind SQL Injection"
+                            "type": "text/html",
+                            "base64": false,
+                            "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS wpDataTables wpdatatables allows Blind SQL Injection.<p>This issue affects wpDataTables: from n/a through 7.4.</p>"
                         }
                     ]
                 }
             ],
             "affected": [
                 {
-                    "vendor": "wpDataTables",
+                    "vendor": "TMS",
+                    "product": "wpDataTables",
+                    "packageName": "wpdatatables",
                     "collectionURL": "https://wordpress.org/plugins",
                     "defaultStatus": "unaffected",
-                    "packageName": "wpdatatables",
-                    "product": "wpDataTables",
                     "versions": [
                         {
-                            "lessThanOrEqual": "7.4",
-                            "status": "affected",
-                            "version": "n/a",
+                            "version": "0",
                             "versionType": "custom",
+                            "status": "affected",
+                            "lessThanOrEqual": "7.4",
                             "changes": [
                                 {
                                     "at": "7.4.1",
@@ -64,25 +55,19 @@
                     ]
                 }
             ],
-            "descriptions": [
-                {
-                    "lang": "en",
-                    "supportingMedia": [
-                        {
-                            "base64": false,
-                            "type": "text/html",
-                            "value": "Unauthenticated SQL Injection in wpDataTables <= 7.4 versions."
-                        }
-                    ],
-                    "value": "Unauthenticated SQL Injection in wpDataTables <= 7.4 versions."
-                }
-            ],
             "references": [
                 {
+                    "url": "https://patchstack.com/database/wordpress/plugin/wpdatatables/vulnerability/wordpress-wpdatatables-plugin-7-4-sql-injection-vulnerability?_s_id=cve",
                     "tags": [
                         "vdb-entry"
-                    ],
-                    "url": "https://patchstack.com/database/wordpress/plugin/wpdatatables/vulnerability/wordpress-wpdatatables-plugin-7-4-sql-injection-vulnerability?_s_id=cve"
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Expatch | Patchstack Bug Bounty Program",
+                    "type": "finder"
                 }
             ],
             "metrics": [
@@ -95,6 +80,10 @@
                         }
                     ],
                     "cvssV3_1": {
+                        "version": "3.1",
+                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
+                        "baseScore": 9.3,
+                        "baseSeverity": "CRITICAL",
                         "attackVector": "NETWORK",
                         "attackComplexity": "LOW",
                         "privilegesRequired": "NONE",
@@ -102,41 +91,50 @@
                         "scope": "CHANGED",
                         "confidentialityImpact": "HIGH",
                         "integrityImpact": "NONE",
-                        "availabilityImpact": "LOW",
-                        "version": "3.1",
-                        "baseSeverity": "CRITICAL",
-                        "baseScore": 9.3,
-                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
+                        "availabilityImpact": "LOW"
                     }
                 }
             ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "cweId": "CWE-89",
+                            "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
+                            "lang": "en",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "impacts": [
+                {
+                    "capecId": "CAPEC-7",
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "value": "Blind SQL Injection"
+                        }
+                    ]
+                }
+            ],
             "solutions": [
                 {
                     "lang": "en",
+                    "value": "Update the WordPress wpDataTables plugin to the latest available version (at least 7.4.1).",
                     "supportingMedia": [
                         {
-                            "base64": false,
                             "type": "text/html",
-                            "value": "Update the WordPress wpDataTables Plugin to the latest available version (at least 7.4.1)."
+                            "base64": false,
+                            "value": "Update the WordPress wpDataTables plugin to the latest available version (at least 7.4.1)."
                         }
-                    ],
-                    "value": "Update the WordPress wpDataTables Plugin to the latest available version (at least 7.4.1)."
+                    ]
                 }
             ],
-            "credits": [
-                {
-                    "lang": "en",
-                    "type": "finder",
-                    "user": "00000000-0000-4000-9000-000000000000",
-                    "value": "Expatch | Patchstack Bug Bounty Program"
-                }
-            ],
-            "source": {
-                "discovery": "EXTERNAL"
-            },
-            "x_generator": {
-                "engine": "Vulnogram 0.2.0"
-            }
+            "tags": [
+                "x_known-exploited-vulnerability",
+                "x_open-source"
+            ]
         },
         "adp": [
             {
diff --git a/data/2026/76xxx/CVE-2026-76173.json b/data/2026/76xxx/CVE-2026-76173.json
new file mode 100644
index 0000000000..2f5dbdd966
--- /dev/null
+++ b/data/2026/76xxx/CVE-2026-76173.json
@@ -0,0 +1,145 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-76173",
+        "assignerOrgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516",
+        "state": "PUBLISHED",
+        "assignerShortName": "INCIBE",
+        "dateReserved": "2026-08-19T10:20:11.642Z",
+        "datePublished": "2026-11-12T09:23:58.431Z",
+        "dateUpdated": "2026-11-12T09:23:58.431Z"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516",
+                "shortName": "INCIBE",
+                "dateUpdated": "2026-11-12T09:23:58.431Z"
+            },
+            "title": "SQL Injection in WhatsApp for Dolibarr by Sgestion / EasySoft",
+            "datePublic": "2026-11-12T09:15:00.000Z",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "cweId": "CWE-89",
+                            "description": "CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection')",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "Sgestion / EasySoft",
+                    "product": "WhatsApp for Dolibarr",
+                    "versions": [
+                        {
+                            "status": "affected",
+                            "version": "1.9"
+                        }
+                    ],
+                    "defaultStatus": "unaffected"
+                }
+            ],
+            "cpeApplicability": [
+                {
+                    "operator": "OR",
+                    "nodes": [
+                        {
+                            "operator": "OR",
+                            "negate": false,
+                            "cpeMatch": [
+                                {
+                                    "vulnerable": true,
+                                    "criteria": "cpe:2.3:a:sgestion_easysoft:whatsapp_for_dolibarr:1.9:*:*:*:*:*:*:*"
+                                }
+                            ]
+                        }
+                    ]
+                }
+            ],
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "Blind SQL injection vulnerability in the public endpoint `public/webhook/receiver.php` of the WhatsApp module for Dolibarr 1.9. The phone number value derived from the `data.key.remoteJid` parameter, received via a JSON request, is incorporated into an SQL query without escaping or parameterization. With the WHATSAPP_WEBHOOK_ALLOW option enabled, an unauthenticated remote attacker could manipulate this parameter to alter the query. Exploitation using a timing-based technique could allow an attacker to extract information from the database and cause service disruption.",
+                    "supportingMedia": [
+                        {
+                            "type": "text/html",
+                            "base64": false,
+                            "value": "Blind SQL injection vulnerability in the public endpoint `public/webhook/receiver.php` of the WhatsApp module for Dolibarr 1.9. The phone number value derived from the `data.key.remoteJid` parameter, received via a JSON request, is incorporated into an SQL query without escaping or parameterization. With the WHATSAPP_WEBHOOK_ALLOW option enabled, an unauthenticated remote attacker could manipulate this parameter to alter the query. Exploitation using a timing-based technique could allow an attacker to extract information from the database and cause service disruption."
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-whatsapp-dolibarr-sgestion-easysoft"
+                }
+            ],
+            "metrics": [
+                {
+                    "format": "CVSS",
+                    "scenarios": [
+                        {
+                            "lang": "en",
+                            "value": "GENERAL"
+                        }
+                    ],
+                    "cvssV4_0": {
+                        "attackVector": "NETWORK",
+                        "attackComplexity": "LOW",
+                        "attackRequirements": "NONE",
+                        "privilegesRequired": "NONE",
+                        "userInteraction": "NONE",
+                        "vulnConfidentialityImpact": "HIGH",
+                        "subConfidentialityImpact": "NONE",
+                        "vulnIntegrityImpact": "NONE",
+                        "subIntegrityImpact": "NONE",
+                        "vulnAvailabilityImpact": "LOW",
+                        "subAvailabilityImpact": "NONE",
+                        "exploitMaturity": "NOT_DEFINED",
+                        "Safety": "NOT_DEFINED",
+                        "Automatable": "NOT_DEFINED",
+                        "Recovery": "NOT_DEFINED",
+                        "valueDensity": "NOT_DEFINED",
+                        "vulnerabilityResponseEffort": "NOT_DEFINED",
+                        "providerUrgency": "NOT_DEFINED",
+                        "version": "4.0",
+                        "baseSeverity": "HIGH",
+                        "baseScore": 8.8,
+                        "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N"
+                    }
+                }
+            ],
+            "solutions": [
+                {
+                    "lang": "en",
+                    "value": "The manufacturer has confirmed that the patch addressing the vulnerability has already been deployed.",
+                    "supportingMedia": [
+                        {
+                            "type": "text/html",
+                            "base64": false,
+                            "value": "The manufacturer has confirmed that the patch addressing the vulnerability has already been deployed."
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Gabriel Jesús Machado Tavares",
+                    "type": "finder"
+                }
+            ],
+            "source": {
+                "discovery": "EXTERNAL"
+            },
+            "x_generator": {
+                "engine": "Vulnogram 1.0.5"
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/data/delta.json b/data/delta.json
index 46f1ec253e..cd0893bf88 100644
--- a/data/delta.json
+++ b/data/delta.json
@@ -1,31 +1,13 @@
 {
-  "fetchTime": "2026-11-12T09:17:47.935Z",
-  "numberOfChanges": 4,
+  "fetchTime": "2026-11-12T10:15:39.562Z",
+  "numberOfChanges": 1,
   "new": [],
   "updated": [
     {
-      "cveId": "CVE-2026-111433",
-      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111433",
-      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111433.json",
-      "dateUpdated": "2026-11-12T09:15:38.969Z"
-    },
-    {
-      "cveId": "CVE-2026-111434",
-      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111434",
-      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111434.json",
-      "dateUpdated": "2026-11-12T09:16:02.029Z"
-    },
-    {
-      "cveId": "CVE-2026-111435",
-      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111435",
-      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111435.json",
-      "dateUpdated": "2026-11-12T09:16:23.711Z"
-    },
-    {
-      "cveId": "CVE-2026-111436",
-      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111436",
-      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111436.json",
-      "dateUpdated": "2026-11-12T09:16:49.389Z"
+      "cveId": "CVE-2026-123765",
+      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123765",
+      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123765.json",
+      "dateUpdated": "2026-11-12T10:08:33.965Z"
     }
   ],
   "error": []
diff --git a/data/deltaLog.json b/data/deltaLog.json
index 66f4efb261..5285ba51aa 100644
--- a/data/deltaLog.json
+++ b/data/deltaLog.json
@@ -1,4 +1,151 @@
 [
+  {
+    "fetchTime": "2026-11-12T10:15:39.562Z",
+    "numberOfChanges": 1,
+    "new": [],
+    "updated": [
+      {
+        "cveId": "CVE-2026-123765",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123765",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123765.json",
+        "dateUpdated": "2026-11-12T10:08:33.965Z"
+      }
+    ],
+    "error": []
+  },
+  {
+    "fetchTime": "2026-11-12T10:04:58.506Z",
+    "numberOfChanges": 1,
+    "new": [
+      {
+        "cveId": "CVE-2026-123765",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123765",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123765.json",
+        "dateUpdated": "2026-11-12T10:03:02.512Z"
+      }
+    ],
+    "updated": [],
+    "error": []
+  },
+  {
+    "fetchTime": "2026-11-12T09:57:38.266Z",
+    "numberOfChanges": 1,
+    "new": [
+      {
+        "cveId": "CVE-2026-124699",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124699",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124699.json",
+        "dateUpdated": "2026-11-12T09:56:54.423Z"
+      }
+    ],
+    "updated": [],
+    "error": []
+  },
+  {
+    "fetchTime": "2026-11-12T09:51:56.564Z",
+    "numberOfChanges": 3,
+    "new": [
+      {
+        "cveId": "CVE-2026-118975",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118975",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118975.json",
+        "dateUpdated": "2026-11-12T09:47:53.694Z"
+      }
+    ],
+    "updated": [
+      {
+        "cveId": "CVE-2026-126255",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126255",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126255.json",
+        "dateUpdated": "2026-11-12T09:46:57.536Z"
+      },
+      {
+        "cveId": "CVE-2026-127016",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127016",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127016.json",
+        "dateUpdated": "2026-11-12T09:49:48.735Z"
+      }
+    ],
+    "error": []
+  },
+  {
+    "fetchTime": "2026-11-12T09:46:06.531Z",
+    "numberOfChanges": 5,
+    "new": [
+      {
+        "cveId": "CVE-2026-106140",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106140",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106140.json",
+        "dateUpdated": "2026-11-12T09:42:29.085Z"
+      },
+      {
+        "cveId": "CVE-2026-117474",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117474",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117474.json",
+        "dateUpdated": "2026-11-12T09:45:55.687Z"
+      },
+      {
+        "cveId": "CVE-2026-117475",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117475",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117475.json",
+        "dateUpdated": "2026-11-12T09:45:44.158Z"
+      },
+      {
+        "cveId": "CVE-2026-117476",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117476",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117476.json",
+        "dateUpdated": "2026-11-12T09:45:29.828Z"
+      },
+      {
+        "cveId": "CVE-2026-127016",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127016",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127016.json",
+        "dateUpdated": "2026-11-12T09:45:17.779Z"
+      }
+    ],
+    "updated": [],
+    "error": []
+  },
+  {
+    "fetchTime": "2026-11-12T09:31:03.447Z",
+    "numberOfChanges": 2,
+    "new": [],
+    "updated": [
+      {
+        "cveId": "CVE-2026-119618",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119618",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119618.json",
+        "dateUpdated": "2026-11-12T09:30:48.936Z"
+      },
+      {
+        "cveId": "CVE-2026-54825",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-54825",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54825.json",
+        "dateUpdated": "2026-11-12T09:29:26.537Z"
+      }
+    ],
+    "error": []
+  },
+  {
+    "fetchTime": "2026-11-12T09:25:22.891Z",
+    "numberOfChanges": 2,
+    "new": [
+      {
+        "cveId": "CVE-2026-124617",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124617",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124617.json",
+        "dateUpdated": "2026-11-12T09:21:07.119Z"
+      },
+      {
+        "cveId": "CVE-2026-76173",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76173",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76173.json",
+        "dateUpdated": "2026-11-12T09:23:58.431Z"
+      }
+    ],
+    "updated": [],
+    "error": []
+  },
   {
     "fetchTime": "2026-11-12T09:17:47.935Z",
     "numberOfChanges": 4,
@@ -848132,304 +848279,5 @@
     ],
     "updated": [],
     "error": []
-  },
-  {
-    "fetchTime": "2026-10-13T09:49:50.826Z",
-    "numberOfChanges": 1,
-    "new": [
-      {
-        "cveId": "CVE-2026-109152",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109152",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109152.json",
-        "dateUpdated": "2026-10-13T09:45:13.589Z"
-      }
-    ],
-    "updated": [],
-    "error": []
-  },
-  {
-    "fetchTime": "2026-10-13T09:31:04.319Z",
-    "numberOfChanges": 46,
-    "new": [
-      {
-        "cveId": "CVE-2026-102073",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102073",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102073.json",
-        "dateUpdated": "2026-10-13T09:19:13.270Z"
-      },
-      {
-        "cveId": "CVE-2026-102074",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102074",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102074.json",
-        "dateUpdated": "2026-10-13T09:19:14.465Z"
-      },
-      {
-        "cveId": "CVE-2026-102075",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102075",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102075.json",
-        "dateUpdated": "2026-10-13T09:19:15.617Z"
-      },
-      {
-        "cveId": "CVE-2026-102076",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102076",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102076.json",
-        "dateUpdated": "2026-10-13T09:19:16.853Z"
-      },
-      {
-        "cveId": "CVE-2026-109144",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109144",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109144.json",
-        "dateUpdated": "2026-10-13T09:15:16.826Z"
-      },
-      {
-        "cveId": "CVE-2026-109149",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109149",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109149.json",
-        "dateUpdated": "2026-10-13T09:30:16.051Z"
-      },
-      {
-        "cveId": "CVE-2026-109162",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109162",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109162.json",
-        "dateUpdated": "2026-10-13T09:27:24.320Z"
-      },
-      {
-        "cveId": "CVE-2026-109854",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109854",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109854.json",
-        "dateUpdated": "2026-10-13T09:16:55.162Z"
-      },
-      {
-        "cveId": "CVE-2026-44414",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44414",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44414.json",
-        "dateUpdated": "2026-10-13T09:18:26.693Z"
-      },
-      {
-        "cveId": "CVE-2026-44415",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44415",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44415.json",
-        "dateUpdated": "2026-10-13T09:18:28.199Z"
-      },
-      {
-        "cveId": "CVE-2026-59241",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59241",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59241.json",
-        "dateUpdated": "2026-10-13T09:18:29.536Z"
-      },
-      {
-        "cveId": "CVE-2026-63350",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63350",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63350.json",
-        "dateUpdated": "2026-10-13T09:18:31.089Z"
-      },
-      {
-        "cveId": "CVE-2026-63351",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63351",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63351.json",
-        "dateUpdated": "2026-10-13T09:18:34.050Z"
-      },
-      {
-        "cveId": "CVE-2026-63352",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63352",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63352.json",
-        "dateUpdated": "2026-10-13T09:18:36.831Z"
-      },
-      {
-        "cveId": "CVE-2026-63353",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63353",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63353.json",
-        "dateUpdated": "2026-10-13T09:18:39.856Z"
-      },
-      {
-        "cveId": "CVE-2026-63354",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63354",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63354.json",
-        "dateUpdated": "2026-10-13T09:18:42.867Z"
-      },
-      {
-        "cveId": "CVE-2026-63355",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63355",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63355.json",
-        "dateUpdated": "2026-10-13T09:18:45.851Z"
-      },
-      {
-        "cveId": "CVE-2026-63356",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63356",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63356.json",
-        "dateUpdated": "2026-10-13T09:18:48.818Z"
-      },
-      {
-        "cveId": "CVE-2026-63357",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63357",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63357.json",
-        "dateUpdated": "2026-10-13T09:18:51.647Z"
-      },
-      {
-        "cveId": "CVE-2026-72895",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-72895",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72895.json",
-        "dateUpdated": "2026-10-13T09:18:54.197Z"
-      },
-      {
-        "cveId": "CVE-2026-78556",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78556",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78556.json",
-        "dateUpdated": "2026-10-13T09:18:55.291Z"
-      },
-      {
-        "cveId": "CVE-2026-78557",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78557",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78557.json",
-        "dateUpdated": "2026-10-13T09:18:56.393Z"
-      },
-      {
-        "cveId": "CVE-2026-85114",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85114",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85114.json",
-        "dateUpdated": "2026-10-13T09:18:57.499Z"
-      },
-      {
-        "cveId": "CVE-2026-85115",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85115",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85115.json",
-        "dateUpdated": "2026-10-13T09:18:58.597Z"
-      },
-      {
-        "cveId": "CVE-2026-89196",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89196",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89196.json",
-        "dateUpdated": "2026-10-13T09:18:59.688Z"
-      },
-      {
-        "cveId": "CVE-2026-89197",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89197",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89197.json",
-        "dateUpdated": "2026-10-13T09:19:00.790Z"
-      },
-      {
-        "cveId": "CVE-2026-89198",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89198",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89198.json",
-        "dateUpdated": "2026-10-13T09:19:01.894Z"
-      },
-      {
-        "cveId": "CVE-2026-89199",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89199",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89199.json",
-        "dateUpdated": "2026-10-13T09:19:03.033Z"
-      },
-      {
-        "cveId": "CVE-2026-89200",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89200",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89200.json",
-        "dateUpdated": "2026-10-13T09:19:04.165Z"
-      },
-      {
-        "cveId": "CVE-2026-89201",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89201",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89201.json",
-        "dateUpdated": "2026-10-13T09:19:05.287Z"
-      },
-      {
-        "cveId": "CVE-2026-89202",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89202",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89202.json",
-        "dateUpdated": "2026-10-13T09:19:06.397Z"
-      },
-      {
-        "cveId": "CVE-2026-89203",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89203",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89203.json",
-        "dateUpdated": "2026-10-13T09:19:07.497Z"
-      },
-      {
-        "cveId": "CVE-2026-89204",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89204",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89204.json",
-        "dateUpdated": "2026-10-13T09:19:08.604Z"
-      },
-      {
-        "cveId": "CVE-2026-89205",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89205",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89205.json",
-        "dateUpdated": "2026-10-13T09:19:09.692Z"
-      },
-      {
-        "cveId": "CVE-2026-89206",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89206",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89206.json",
-        "dateUpdated": "2026-10-13T09:19:10.792Z"
-      },
-      {
-        "cveId": "CVE-2026-89208",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89208",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89208.json",
-        "dateUpdated": "2026-10-13T09:19:12.086Z"
-      }
-    ],
-    "updated": [
-      {
-        "cveId": "CVE-2024-49849",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-49849",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/49xxx/CVE-2024-49849.json",
-        "dateUpdated": "2026-10-13T09:18:14.592Z"
-      },
-      {
-        "cveId": "CVE-2024-52051",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-52051",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/52xxx/CVE-2024-52051.json",
-        "dateUpdated": "2026-10-13T09:18:15.738Z"
-      },
-      {
-        "cveId": "CVE-2024-54678",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-54678",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/54xxx/CVE-2024-54678.json",
-        "dateUpdated": "2026-10-13T09:18:16.878Z"
-      },
-      {
-        "cveId": "CVE-2025-30033",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-30033",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/30xxx/CVE-2025-30033.json",
-        "dateUpdated": "2026-10-13T09:18:18.488Z"
-      },
-      {
-        "cveId": "CVE-2025-40759",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-40759",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/40xxx/CVE-2025-40759.json",
-        "dateUpdated": "2026-10-13T09:18:19.713Z"
-      },
-      {
-        "cveId": "CVE-2025-40815",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-40815",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/40xxx/CVE-2025-40815.json",
-        "dateUpdated": "2026-10-13T09:18:20.838Z"
-      },
-      {
-        "cveId": "CVE-2025-40816",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-40816",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/40xxx/CVE-2025-40816.json",
-        "dateUpdated": "2026-10-13T09:18:21.945Z"
-      },
-      {
-        "cveId": "CVE-2025-40817",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-40817",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/40xxx/CVE-2025-40817.json",
-        "dateUpdated": "2026-10-13T09:18:23.184Z"
-      },
-      {
-        "cveId": "CVE-2025-40946",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-40946",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/40xxx/CVE-2025-40946.json",
-        "dateUpdated": "2026-10-13T09:18:24.303Z"
-      },
-      {
-        "cveId": "CVE-2026-41125",
-        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-41125",
-        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41125.json",
-        "dateUpdated": "2026-10-13T09:18:25.426Z"
-      }
-    ],
-    "error": []
   }
 ]
\ No newline at end of file
diff --git a/state/sync.json b/state/sync.json
index 2ad73eb83a..3a9c2ea45c 100644
--- a/state/sync.json
+++ b/state/sync.json
@@ -1,7 +1,7 @@
 {
   "source": "https://github.com/CVEProject/cvelistV5.git",
-  "upstream_commit": "b91a18f7d71b12948b83421991bc9a3c7a9ff3a4",
+  "upstream_commit": "9d164020d258e46afaf18a0078d9f66376fd5b9c",
   "since_year": 2017,
-  "records": 331495,
-  "synced_at_utc": "2026-11-12T09:25:53.952140+00:00"
+  "records": 331505,
+  "synced_at_utc": "2026-11-12T10:26:35.244167+00:00"
 }