From 193c978107f7886e710a08238cf185c1fb5b52d6 Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Sun, 15 Nov 2026 10:29:21 +0100 Subject: [PATCH] CVE sync 2026-11-15T09:29:16Z --- data/2026/129xxx/CVE-2026-129444.json | 172 ++++++++++++++++++++++++++ data/delta.json | 10 +- data/deltaLog.json | 52 +++----- state/sync.json | 6 +- 4 files changed, 194 insertions(+), 46 deletions(-) create mode 100644 data/2026/129xxx/CVE-2026-129444.json diff --git a/data/2026/129xxx/CVE-2026-129444.json b/data/2026/129xxx/CVE-2026-129444.json new file mode 100644 index 0000000000..c83cf26938 --- /dev/null +++ b/data/2026/129xxx/CVE-2026-129444.json @@ -0,0 +1,172 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-129444", + "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "state": "PUBLISHED", + "assignerShortName": "VulDB", + "dateReserved": "2026-11-14T16:58:27.970Z", + "datePublished": "2026-11-15T08:15:18.180Z", + "dateUpdated": "2026-11-15T08:15:18.180Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "shortName": "VulDB", + "dateUpdated": "2026-11-15T08:15:18.180Z" + }, + "title": "D-Link DSL-6740C FTP Daemon ftpd_conf.php hard-coded credentials", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-798", + "lang": "en", + "description": "Hard-coded Credentials" + } + ] + }, + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-259", + "lang": "en", + "description": "Use of Hard-coded Password" + } + ] + } + ], + "affected": [ + { + "vendor": "D-Link", + "product": "DSL-6740C", + "versions": [ + { + "version": "20131126", + "status": "affected" + } + ], + "cpes": [ + "cpe:2.3:h:d-link:dsl-6740c:*:*:*:*:*:*:*:*" + ], + "modules": [ + "FTP Daemon" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was identified in D-Link DSL-6740C 20131126. This affects an unknown function of the file /etc/templates/ftpd/ftpd_conf.php of the component FTP Daemon. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit is publicly available and might be used." + } + ], + "metrics": [ + { + "cvssV4_0": { + "version": "4.0", + "baseScore": 10, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P", + "baseSeverity": "CRITICAL" + } + }, + { + "cvssV3_1": { + "version": "3.1", + "baseScore": 10, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C", + "baseSeverity": "CRITICAL" + } + }, + { + "cvssV3_0": { + "version": "3.0", + "baseScore": 10, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C", + "baseSeverity": "CRITICAL" + } + }, + { + "cvssV2_0": { + "version": "2.0", + "baseScore": 10, + "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:C" + } + } + ], + "timeline": [ + { + "time": "2026-11-14T00:00:00.000Z", + "lang": "en", + "value": "Advisory disclosed" + }, + { + "time": "2026-11-14T01:00:00.000Z", + "lang": "en", + "value": "VulDB entry created" + }, + { + "time": "2026-11-14T18:03:34.000Z", + "lang": "en", + "value": "VulDB entry last update" + } + ], + "credits": [ + { + "lang": "en", + "value": "BenSmith (VulDB User)", + "type": "reporter" + } + ], + "references": [ + { + "url": "https://vuldb.com/vuln/437457", + "name": "VDB-437457 | D-Link DSL-6740C FTP Daemon ftpd_conf.php hard-coded credentials", + "tags": [ + "vdb-entry" + ] + }, + { + "url": "https://vuldb.com/vuln/437457/cti", + "name": "VDB-437457 | CTI Indicators (IOB, IOC, TTP, IOA)", + "tags": [ + "signature", + "permissions-required" + ] + }, + { + "url": "https://vuldb.com/cve/CVE-2026-129444", + "name": "CVE-2026-129444 | CVE Analysis and Report", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://vuldb.com/submit/1044943", + "name": "Submit #1044943 | D-Link DSL-6740C ADSL2+ router (Rev.A) S5 and N5, TR069 builds dated 20131126 Hard-coded Credentials", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://github.com/XueDugu/dlink-dsl6740c-ftp-default-evidence", + "tags": [ + "exploit" + ] + }, + { + "url": "https://www.dlink.com/", + "tags": [ + "product" + ] + } + ], + "x_generator": [ + "VulDB PVTS v202611" + ] + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index 14d7d679d9..345734e136 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,12 +1,12 @@ { - "fetchTime": "2026-11-15T07:46:11.823Z", + "fetchTime": "2026-11-15T08:19:23.136Z", "numberOfChanges": 1, "new": [ { - "cveId": "CVE-2026-129443", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129443", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129443.json", - "dateUpdated": "2026-11-15T07:45:19.106Z" + "cveId": "CVE-2026-129444", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129444", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129444.json", + "dateUpdated": "2026-11-15T08:15:18.180Z" } ], "updated": [], diff --git a/data/deltaLog.json b/data/deltaLog.json index 1d83496157..61de9743f3 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,18 @@ [ + { + "fetchTime": "2026-11-15T08:19:23.136Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-129444", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129444", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129444.json", + "dateUpdated": "2026-11-15T08:15:18.180Z" + } + ], + "updated": [], + "error": [] + }, { "fetchTime": "2026-11-15T07:46:11.823Z", "numberOfChanges": 1, @@ -718583,43 +718597,5 @@ ], "updated": [], "error": [] - }, - { - "fetchTime": "2026-10-16T07:48:52.804Z", - "numberOfChanges": 5, - "new": [ - { - "cveId": "CVE-2026-100106", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100106", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100106.json", - "dateUpdated": "2026-10-16T07:44:02.898Z" - }, - { - "cveId": "CVE-2026-100108", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100108", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100108.json", - "dateUpdated": "2026-10-16T07:44:03.268Z" - }, - { - "cveId": "CVE-2026-75903", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75903", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75903.json", - "dateUpdated": "2026-10-16T07:44:02.515Z" - }, - { - "cveId": "CVE-2026-87111", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87111", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87111.json", - "dateUpdated": "2026-10-16T07:44:01.961Z" - }, - { - "cveId": "CVE-2026-96870", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96870", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96870.json", - "dateUpdated": "2026-10-16T07:44:03.654Z" - } - ], - "updated": [], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 74209deb0a..c992ece148 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "f90cde7f9bfb5f815dbd0af5e992ace8ca743772", + "upstream_commit": "c8095997fb2232a992282d7f0b48464983604854", "since_year": 2017, - "records": 332638, - "synced_at_utc": "2026-11-15T08:24:29.690826+00:00" + "records": 332639, + "synced_at_utc": "2026-11-15T09:25:10.021239+00:00" }