diff --git a/data/2026/0xxx/CVE-2026-0175.json b/data/2026/0xxx/CVE-2026-0175.json index 7c92b71f2a..cc4d44fea3 100644 --- a/data/2026/0xxx/CVE-2026-0175.json +++ b/data/2026/0xxx/CVE-2026-0175.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2025-10-23T08:45:20.096Z", "datePublished": "2026-11-10T19:20:10.794Z", - "dateUpdated": "2026-11-13T05:02:04.834Z" + "dateUpdated": "2026-11-13T13:56:07.154Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:05.587261Z", + "id": "CVE-2026-0175", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-0175" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:04.834Z" + "dateUpdated": "2026-11-13T13:56:07.154Z" } } ] diff --git a/data/2026/101xxx/CVE-2026-101295.json b/data/2026/101xxx/CVE-2026-101295.json index 8801209218..df93b596fa 100644 --- a/data/2026/101xxx/CVE-2026-101295.json +++ b/data/2026/101xxx/CVE-2026-101295.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-28T13:01:18.667Z", "datePublished": "2026-09-30T14:06:16.437Z", - "dateUpdated": "2026-11-06T22:44:27.022Z" + "dateUpdated": "2026-11-13T13:37:50.881Z" }, "containers": { "cna": { @@ -48,6 +48,60 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.13", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "openshift4/oc-mirror-plugin-rhel8", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793823172", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.13::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.15", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "openshift4/oc-mirror-plugin-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793875992", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.15::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.17", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "openshift4/oc-mirror-plugin-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793907408", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.17::el9" + ] + }, { "vendor": "Red Hat", "product": "Assisted Installer for Red Hat OpenShift Container Platform 2", @@ -58,26 +112,6 @@ "cpe:/a:redhat:assisted_installer:2" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat OpenShift Container Platform 4", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "openshift4/oc-mirror-plugin-rhel8", - "defaultStatus": "unknown", - "cpes": [ - "cpe:/a:redhat:openshift:4" - ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat OpenShift Container Platform 4", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "openshift4/oc-mirror-plugin-rhel9", - "defaultStatus": "unknown", - "cpes": [ - "cpe:/a:redhat:openshift:4" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 5", @@ -90,6 +124,30 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:95746", + "name": "RHSA-2026:95746", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:95756", + "name": "RHSA-2026:95756", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96283", + "name": "RHSA-2026:96283", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-101295", "tags": [ @@ -147,7 +205,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T22:44:27.022Z" + "dateUpdated": "2026-11-13T13:37:50.881Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/103xxx/CVE-2026-103242.json b/data/2026/103xxx/CVE-2026-103242.json index 43fcd22c1c..f5d762b81a 100644 --- a/data/2026/103xxx/CVE-2026-103242.json +++ b/data/2026/103xxx/CVE-2026-103242.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-30T10:39:52.447Z", "datePublished": "2026-09-30T11:50:32.039Z", - "dateUpdated": "2026-11-06T07:39:50.256Z" + "dateUpdated": "2026-11-13T13:33:52.458Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rpm-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "6.1.0-1.4.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -98,16 +116,6 @@ "cpe:/a:redhat:enterprise_linux:9" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rpm", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", @@ -430,6 +438,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:98095", + "name": "RHSA-2026:98095", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-103242", "tags": [ @@ -487,7 +503,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T07:39:50.256Z" + "dateUpdated": "2026-11-13T13:33:52.458Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/109xxx/CVE-2026-109095.json b/data/2026/109xxx/CVE-2026-109095.json new file mode 100644 index 0000000000..948b2cb537 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109095.json @@ -0,0 +1,179 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109095", + "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", + "state": "PUBLISHED", + "assignerShortName": "suse", + "dateReserved": "2026-10-12T06:41:23.778Z", + "datePublished": "2026-11-13T13:53:11.592Z", + "dateUpdated": "2026-11-13T13:53:11.592Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", + "shortName": "suse", + "dateUpdated": "2026-11-13T13:53:11.592Z" + }, + "title": "X.Org Server glamor Xv Image Size Integer Overflow", + "datePublic": "2026-11-13T13:29:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-190", + "description": "CWE-190 Integer overflow or wraparound", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-540", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-540 Overread Buffers" + } + ] + } + ], + "affected": [ + { + "vendor": "X.Org", + "product": "xwayland", + "packageName": "xwayland", + "repo": "https://gitlab.freedesktop.org/xorg/xserver/", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "24.1.15", + "versionType": "rpm" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "X.Org", + "product": "xorg-x11-server", + "packageName": "xorg-x11-server", + "repo": "https://gitlab.freedesktop.org/xorg/xserver/", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "21.1.26", + "versionType": "rpm" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "24.1.15" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:x.org:xorg-x11-server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "21.1.26" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash the X server or leak out data.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash the X server or leak out data." + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/99e647e914d947a791e92253a071955a9703647a", + "tags": [ + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6.9, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Tristan Madani ", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109096.json b/data/2026/109xxx/CVE-2026-109096.json new file mode 100644 index 0000000000..033a48d271 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109096.json @@ -0,0 +1,169 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109096", + "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", + "state": "PUBLISHED", + "assignerShortName": "suse", + "dateReserved": "2026-10-12T06:41:23.778Z", + "datePublished": "2026-11-13T13:23:13.658Z", + "dateUpdated": "2026-11-13T13:23:13.658Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", + "shortName": "suse", + "dateUpdated": "2026-11-13T13:23:13.658Z" + }, + "title": "X.Org Server XvPutImage Negative Image Size Length Bypass", + "datePublic": "2026-11-13T10:50:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-805", + "description": "CWE-805 Buffer access with incorrect length value", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-100", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-100 Overflow Buffers" + } + ] + } + ], + "affected": [ + { + "vendor": "X.Org", + "product": "xwayland", + "packageName": "xwayland", + "repo": "https://gitlab.freedesktop.org/xorg/xserver/", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "24.1.15", + "versionType": "rpm" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "X.Org", + "product": "xorg-x11-server", + "packageName": "xorg-x11-server", + "repo": "https://gitlab.freedesktop.org/xorg/xserver/", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "21.1.26", + "versionType": "rpm" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "24.1.15" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:x.org:xorg-x11-server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "21.1.26" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect handling of negative returns from ddQueryImageAttributes() when processing XvPutImage requests in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by authenticated X clients to crash the X server.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Incorrect handling of negative returns from ddQueryImageAttributes() when processing XvPutImage requests in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by authenticated X clients to crash the X server." + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/1376ac1f0edad6bd44dc6db3b4e49370a60d8e2f", + "tags": [ + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Tristan Madani ", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112314.json b/data/2026/112xxx/CVE-2026-112314.json index 0900af82a8..35281ebebb 100644 --- a/data/2026/112xxx/CVE-2026-112314.json +++ b/data/2026/112xxx/CVE-2026-112314.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:23:32.344Z", "datePublished": "2026-11-09T19:08:29.276Z", - "dateUpdated": "2026-11-13T00:05:56.729Z" + "dateUpdated": "2026-11-13T13:30:24.557Z" }, "containers": { "cna": { @@ -141,6 +141,24 @@ "cpe:/o:redhat:rhel_eus:9.8::baseos" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "krb5-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.22.3-0.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -170,19 +188,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "krb5", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97811", + "name": "RHSA-2026:97811", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99624", "name": "RHSA-2026:99624", @@ -272,7 +288,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-13T00:05:56.729Z" + "dateUpdated": "2026-11-13T13:30:24.557Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112318.json b/data/2026/112xxx/CVE-2026-112318.json index dbfe5104ed..42c2269a9a 100644 --- a/data/2026/112xxx/CVE-2026-112318.json +++ b/data/2026/112xxx/CVE-2026-112318.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:25:59.007Z", "datePublished": "2026-11-09T19:08:02.661Z", - "dateUpdated": "2026-11-13T12:37:39.525Z" + "dateUpdated": "2026-11-13T14:10:28.200Z" }, "containers": { "cna": { @@ -293,6 +293,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:07:06.907800Z", + "id": "CVE-2026-112318", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:10:28.200Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/115xxx/CVE-2026-115456.json b/data/2026/115xxx/CVE-2026-115456.json index d57701ba1a..eabb367867 100644 --- a/data/2026/115xxx/CVE-2026-115456.json +++ b/data/2026/115xxx/CVE-2026-115456.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-22T15:06:48.490Z", "datePublished": "2026-10-30T08:21:50.361Z", - "dateUpdated": "2026-11-13T04:06:35.453Z" + "dateUpdated": "2026-11-13T13:43:03.628Z" }, "containers": { "cna": { @@ -214,6 +214,24 @@ "cpe:/a:redhat:hummingbird:1" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "gcc13-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "13.5.0-0.5.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -364,16 +382,6 @@ "cpe:/a:redhat:enterprise_linux:9" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "gcc13", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", @@ -734,6 +742,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:95981", + "name": "RHSA-2026:95981", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:98524", "name": "RHSA-2026:98524", @@ -841,7 +857,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-13T04:06:35.453Z" + "dateUpdated": "2026-11-13T13:43:03.628Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/116xxx/CVE-2026-116411.json b/data/2026/116xxx/CVE-2026-116411.json new file mode 100644 index 0000000000..f74a9aad78 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116411.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116411", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-10-26T10:04:27.242Z", + "datePublished": "2026-11-13T14:03:41.940Z", + "dateUpdated": "2026-11-13T14:03:41.940Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T14:03:41.940Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-918", + "description": "CWE-918: Server-Side Request Forgery (SSRF)", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to information disclosure via requests to internal services.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to information disclosure via requests to internal services." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116412.json b/data/2026/116xxx/CVE-2026-116412.json new file mode 100644 index 0000000000..2738868348 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116412.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116412", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-10-26T10:04:27.242Z", + "datePublished": "2026-11-13T13:38:40.528Z", + "dateUpdated": "2026-11-13T13:38:40.528Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T13:38:40.528Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-732", + "description": "CWE-732: Incorrect Permission Assignment for Critical Resource", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains an insecure-file-permissions vulnerability. A local low-privileged attacker could exploit this vulnerability to disclose administrative credentials.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains an insecure-file-permissions vulnerability. A local low-privileged attacker could exploit this vulnerability to disclose administrative credentials." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116413.json b/data/2026/116xxx/CVE-2026-116413.json new file mode 100644 index 0000000000..b646876db2 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116413.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116413", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-10-26T10:04:27.242Z", + "datePublished": "2026-11-13T13:25:35.934Z", + "dateUpdated": "2026-11-13T13:25:35.934Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T13:25:35.934Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-327", + "description": "CWE-327: Use of a Broken or Risky Cryptographic Algorithm", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains a use-of-broken-cryptography vulnerability. A low-privileged attacker could exploit it to impersonate another identity, potentially leading to unauthorized access.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains a use-of-broken-cryptography vulnerability. A low-privileged attacker could exploit it to impersonate another identity, potentially leading to unauthorized access." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116645.json b/data/2026/116xxx/CVE-2026-116645.json index 24f4fa101b..a01ff7d353 100644 --- a/data/2026/116xxx/CVE-2026-116645.json +++ b/data/2026/116xxx/CVE-2026-116645.json @@ -8,7 +8,7 @@ "assignerShortName": "Fluid Attacks", "dateReserved": "2026-10-26T19:01:24.882Z", "datePublished": "2026-11-11T02:47:14.028Z", - "dateUpdated": "2026-11-11T02:50:53.016Z" + "dateUpdated": "2026-11-13T13:33:24.352Z" }, "containers": { "cna": { @@ -220,6 +220,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:33:11.556092Z", + "id": "CVE-2026-116645", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:33:24.352Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118368.json b/data/2026/118xxx/CVE-2026-118368.json index e997008e5a..e7c384120e 100644 --- a/data/2026/118xxx/CVE-2026-118368.json +++ b/data/2026/118xxx/CVE-2026-118368.json @@ -8,7 +8,7 @@ "assignerShortName": "Fluid Attacks", "dateReserved": "2026-10-27T23:14:47.105Z", "datePublished": "2026-11-11T04:40:37.245Z", - "dateUpdated": "2026-11-11T04:40:37.245Z" + "dateUpdated": "2026-11-13T13:32:30.714Z" }, "containers": { "cna": { @@ -220,6 +220,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:32:16.586717Z", + "id": "CVE-2026-118368", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:32:30.714Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120749.json b/data/2026/120xxx/CVE-2026-120749.json index 42e6370970..a97907dd88 100644 --- a/data/2026/120xxx/CVE-2026-120749.json +++ b/data/2026/120xxx/CVE-2026-120749.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-11-02T21:01:14.154Z", "datePublished": "2026-11-06T06:56:57.944Z", - "dateUpdated": "2026-11-10T04:50:49.366Z" + "dateUpdated": "2026-11-13T13:30:08.715Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "dbus-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.16.2-7.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -97,19 +115,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:9" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "dbus", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97846", + "name": "RHSA-2026:97846", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-120749", "tags": [ @@ -176,7 +192,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-10T03:29:11.666Z" + "dateUpdated": "2026-11-13T13:30:08.715Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/120xxx/CVE-2026-120977.json b/data/2026/120xxx/CVE-2026-120977.json index be24742ec8..72fea50973 100644 --- a/data/2026/120xxx/CVE-2026-120977.json +++ b/data/2026/120xxx/CVE-2026-120977.json @@ -8,7 +8,7 @@ "assignerShortName": "Arista", "dateReserved": "2026-11-03T05:14:06.127Z", "datePublished": "2026-11-10T20:09:52.143Z", - "dateUpdated": "2026-11-13T05:00:15.677Z" + "dateUpdated": "2026-11-13T13:53:31.624Z" }, "containers": { "cna": { @@ -161,13 +161,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:16.425048Z", + "id": "CVE-2026-120977", "options": [ { "Exploitation": "none" @@ -180,16 +180,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-120977" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:15.677Z" + "dateUpdated": "2026-11-13T13:53:31.624Z" } } ] diff --git a/data/2026/121xxx/CVE-2026-121287.json b/data/2026/121xxx/CVE-2026-121287.json index 832fe43ea8..1b6b6a5762 100644 --- a/data/2026/121xxx/CVE-2026-121287.json +++ b/data/2026/121xxx/CVE-2026-121287.json @@ -8,7 +8,7 @@ "assignerShortName": "Arista", "dateReserved": "2026-11-03T11:21:01.891Z", "datePublished": "2026-11-10T20:09:55.863Z", - "dateUpdated": "2026-11-13T05:00:12.163Z" + "dateUpdated": "2026-11-13T13:53:02.249Z" }, "containers": { "cna": { @@ -187,13 +187,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:12.976294Z", + "id": "CVE-2026-121287", "options": [ { "Exploitation": "none" @@ -206,16 +206,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-121287" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:12.163Z" + "dateUpdated": "2026-11-13T13:53:02.249Z" } } ] diff --git a/data/2026/121xxx/CVE-2026-121885.json b/data/2026/121xxx/CVE-2026-121885.json index ce8b665f73..fc65166454 100644 --- a/data/2026/121xxx/CVE-2026-121885.json +++ b/data/2026/121xxx/CVE-2026-121885.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-11-04T11:15:46.453Z", "datePublished": "2026-11-10T14:34:31.734Z", - "dateUpdated": "2026-11-11T08:05:52.838Z" + "dateUpdated": "2026-11-13T13:32:49.269Z" }, "containers": { "cna": { @@ -67,6 +67,24 @@ "collectionURL": "https://github.com/podman-container-tools/podman", "defaultStatus": "unaffected" }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "podman-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "6.1.4-1.4.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -97,16 +115,6 @@ "cpe:/a:redhat:enterprise_linux:9" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "podman", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", @@ -119,6 +127,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:98992", + "name": "RHSA-2026:98992", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-121885", "tags": [ @@ -179,7 +195,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-11T08:05:52.838Z" + "dateUpdated": "2026-11-13T13:32:49.269Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/123xxx/CVE-2026-123041.json b/data/2026/123xxx/CVE-2026-123041.json index 4b27b1712a..7add51508e 100644 --- a/data/2026/123xxx/CVE-2026-123041.json +++ b/data/2026/123xxx/CVE-2026-123041.json @@ -8,7 +8,7 @@ "assignerShortName": "Kong", "dateReserved": "2026-11-05T08:13:50.698Z", "datePublished": "2026-11-10T21:43:16.091Z", - "dateUpdated": "2026-11-10T21:43:16.091Z" + "dateUpdated": "2026-11-13T13:41:26.043Z" }, "containers": { "cna": { @@ -161,6 +161,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:41:08.902054Z", + "id": "CVE-2026-123041", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:41:26.043Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123811.json b/data/2026/123xxx/CVE-2026-123811.json index 223428d9e5..963ae88196 100644 --- a/data/2026/123xxx/CVE-2026-123811.json +++ b/data/2026/123xxx/CVE-2026-123811.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-06T15:27:56.226Z", "datePublished": "2026-11-09T21:01:42.490Z", - "dateUpdated": "2026-11-09T21:01:42.490Z" + "dateUpdated": "2026-11-13T14:13:56.947Z" }, "containers": { "cna": { @@ -107,6 +107,48 @@ "advisory": "GHSA-p7w7-4929-vpj5", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/dynatrace-oss/dynatrace-mcp/security/advisories/GHSA-p7w7-4929-vpj5", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:13:30.185329Z", + "id": "CVE-2026-123811", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:13:56.947Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123815.json b/data/2026/123xxx/CVE-2026-123815.json index f4d62e7b62..4f3fb7e14a 100644 --- a/data/2026/123xxx/CVE-2026-123815.json +++ b/data/2026/123xxx/CVE-2026-123815.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-06T15:27:56.227Z", "datePublished": "2026-11-09T21:13:15.779Z", - "dateUpdated": "2026-11-09T21:13:15.779Z" + "dateUpdated": "2026-11-13T13:14:56.541Z" }, "containers": { "cna": { @@ -99,6 +99,48 @@ "advisory": "GHSA-fr26-jjhm-638c", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/pyload/pyload/security/advisories/GHSA-fr26-jjhm-638c", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:14:21.464572Z", + "id": "CVE-2026-123815", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:14:56.541Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123819.json b/data/2026/123xxx/CVE-2026-123819.json index 73fcd8a018..a9aeb55507 100644 --- a/data/2026/123xxx/CVE-2026-123819.json +++ b/data/2026/123xxx/CVE-2026-123819.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-06T15:27:56.227Z", "datePublished": "2026-11-09T21:22:17.696Z", - "dateUpdated": "2026-11-09T21:22:17.696Z" + "dateUpdated": "2026-11-13T13:16:14.114Z" }, "containers": { "cna": { @@ -147,6 +147,40 @@ "advisory": "GHSA-x5cx-w6p2-mxf2", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:15:42.525071Z", + "id": "CVE-2026-123819", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:16:14.114Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123876.json b/data/2026/123xxx/CVE-2026-123876.json index aa94eb3b2b..a8ef0b91fc 100644 --- a/data/2026/123xxx/CVE-2026-123876.json +++ b/data/2026/123xxx/CVE-2026-123876.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-11-06T16:23:26.995Z", "datePublished": "2026-11-06T17:38:41.186Z", - "dateUpdated": "2026-11-10T19:57:56.860Z" + "dateUpdated": "2026-11-13T13:30:43.386Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "containers-common-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "0.70.0-1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -78,16 +96,6 @@ "cpe:/a:redhat:enterprise_linux:9" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "containers-common", - "defaultStatus": "unaffected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] - }, { "vendor": "Red Hat", "product": "Red Hat Hardened Images", @@ -150,6 +158,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:88737", + "name": "RHSA-2026:88737", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-123876", "tags": [ @@ -216,7 +232,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T21:33:05.303Z" + "dateUpdated": "2026-11-13T13:30:43.386Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/124xxx/CVE-2026-124742.json b/data/2026/124xxx/CVE-2026-124742.json index d67a5f5cfb..f3727b5976 100644 --- a/data/2026/124xxx/CVE-2026-124742.json +++ b/data/2026/124xxx/CVE-2026-124742.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-11-09T11:36:29.478Z", "datePublished": "2026-11-11T11:19:54.026Z", - "dateUpdated": "2026-11-11T19:38:47.003Z" + "dateUpdated": "2026-11-13T13:32:57.527Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "busybox-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.37.0-9.5.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -57,19 +75,17 @@ "cpes": [ "cpe:/o:redhat:rhel_els:6" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "busybox", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:99577", + "name": "RHSA-2026:99577", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-124742", "tags": [ @@ -130,7 +146,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-11T19:38:47.003Z" + "dateUpdated": "2026-11-13T13:32:57.527Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/124xxx/CVE-2026-124758.json b/data/2026/124xxx/CVE-2026-124758.json new file mode 100644 index 0000000000..d5ee6e23ac --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124758.json @@ -0,0 +1,132 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124758", + "assignerOrgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "state": "PUBLISHED", + "assignerShortName": "rt-labs", + "dateReserved": "2026-11-09T12:48:59.071Z", + "datePublished": "2026-11-13T13:23:16.149Z", + "dateUpdated": "2026-11-13T13:23:16.149Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "shortName": "rt-labs", + "dateUpdated": "2026-11-13T13:23:16.149Z" + }, + "title": "Integer underflow of the record data length in IODWrite requests", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-191", + "description": "CWE-191 Integer Underflow (Wrap or Wraparound)", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "RT-Labs", + "product": "P-Net", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.0.4", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "P-Net before 1.0.4 does not check the record data length of an IODWrite request to a non-user record index against the size of the record block header. The 32-bit length is reduced by the header size before it is passed to the record handlers, so a length smaller than the header underflows and the handlers receive a data length of about 65530. The fixed-size reads of the I&M and PDPort handlers can then read past the end of the session buffer. The result of the write is discarded. The attacker must have an established Application Relationship or be able to send in the context of one, and requires ADJACENT network access.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

P-Net before 1.0.4 does not check the record data length of an IODWrite request to a non-user record index against the size of the record block header. The 32-bit length is reduced by the header size before it is passed to the record handlers, so a length smaller than the header underflows and the handlers receive a data length of about 65530. The fixed-size reads of the I&M and PDPort handlers can then read past the end of the session buffer. The result of the write is discarded. The attacker must have an established Application Relationship or be able to send in the context of one, and requires ADJACENT network access.

" + } + ] + } + ], + "references": [ + { + "url": "https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf", + "name": "Cybersecurity advisory for P-Net" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "LOW", + "baseScore": 2.3, + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to P-Net 1.0.4 or later.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade to P-Net 1.0.4 or later.

" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "3ntr0py1337", + "type": "finder" + }, + { + "lang": "en", + "value": "Khalilov M", + "type": "finder" + } + ], + "source": { + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124759.json b/data/2026/124xxx/CVE-2026-124759.json new file mode 100644 index 0000000000..38183ebfd4 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124759.json @@ -0,0 +1,146 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124759", + "assignerOrgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "state": "PUBLISHED", + "assignerShortName": "rt-labs", + "dateReserved": "2026-11-09T12:48:59.071Z", + "datePublished": "2026-11-13T13:22:56.820Z", + "dateUpdated": "2026-11-13T13:22:56.820Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "shortName": "rt-labs", + "dateUpdated": "2026-11-13T13:22:56.820Z" + }, + "title": "Alarm frames are accepted from any source address", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-346", + "description": "CWE-346 Origin Validation Error", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "RT-Labs", + "product": "P-Net", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.0.4", + "versionType": "semver" + }, + { + "status": "affected", + "version": "1.0.4", + "lessThan": "*", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "P-Net before 1.0.4 routes a received RTA alarm frame to an Application Relationship using only the destination alarm reference in the frame, without checking the source of the frame. A host with ADJACENT network access can abort an established Application Relationship with a single alarm ERROR frame, or deliver forged alarm notifications with chosen type, slot, subslot, USI and payload to the application.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

P-Net before 1.0.4 routes a received RTA alarm frame to an Application Relationship using only the destination alarm reference in the frame, without checking the source of the frame. A host with ADJACENT network access can abort an established Application Relationship with a single alarm ERROR frame, or deliver forged alarm notifications with chosen type, slot, subslot, USI and payload to the application.

" + } + ] + } + ], + "references": [ + { + "url": "https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf", + "name": "Cybersecurity advisory for P-Net" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to P-Net 1.0.4 or later, which ignores alarm frames that do not come from the IO-controller of the Application Relationship. It reduces the risk but does not remove it, see Remaining Risk.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade to P-Net 1.0.4 or later, which ignores alarm frames that do not come from the IO-controller of the Application Relationship. It reduces the risk but does not remove it, see Remaining Risk.

" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Aditya Gupta (Attify - attify.com)", + "type": "finder" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "workarounds": [ + { + "lang": "en", + "value": "Isolate the network of the device from untrusted hosts, for example by a firewall or a separate network,. The remaining risk is that a host on the network that knows the MAC address of the IO-controller and the alarm references can still send forged alarm frames.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Isolate the network of the device from untrusted hosts, for example by a firewall or a separate network,. The remaining risk is that a host on the network that knows the MAC address of the IO-controller and the alarm references can still send forged alarm frames.

" + } + ] + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124760.json b/data/2026/124xxx/CVE-2026-124760.json new file mode 100644 index 0000000000..e457301832 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124760.json @@ -0,0 +1,127 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124760", + "assignerOrgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "state": "PUBLISHED", + "assignerShortName": "rt-labs", + "dateReserved": "2026-11-09T12:48:59.072Z", + "datePublished": "2026-11-13T13:23:45.251Z", + "dateUpdated": "2026-11-13T13:23:45.251Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "shortName": "rt-labs", + "dateUpdated": "2026-11-13T13:23:45.251Z" + }, + "title": "Alarm receiver stops delivering alarms after a malformed alarm notification", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-754", + "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "RT-Labs", + "product": "P-Net", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.0.4", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "P-Net before 1.0.4 sets the alarm receiver state to waiting for confirmation before the data of a received alarm notification is parsed. If the parsing fails the state is not restored, and later alarm notifications of the same priority are discarded without acknowledge until the Application Relationship is released. The Application Relationship and the cyclic data exchange keep working. The attacker must be able to send an alarm notification in the context of an established Application Relationship and requires ADJACENT network access.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

P-Net before 1.0.4 sets the alarm receiver state to waiting for confirmation before the data of a received alarm notification is parsed. If the parsing fails the state is not restored, and later alarm notifications of the same priority are discarded without acknowledge until the Application Relationship is released. The Application Relationship and the cyclic data exchange keep working. The attacker must be able to send an alarm notification in the context of an established Application Relationship and requires ADJACENT network access.

" + } + ] + } + ], + "references": [ + { + "url": "https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf", + "name": "Cybersecurity advisory for P-Net" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "LOW", + "baseScore": 2.3, + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to P-Net 1.0.4 or later.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade to P-Net 1.0.4 or later.

" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Aditya Gupta (Attify - attify.com)", + "type": "finder" + } + ], + "source": { + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124761.json b/data/2026/124xxx/CVE-2026-124761.json new file mode 100644 index 0000000000..e64fbec3e2 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124761.json @@ -0,0 +1,127 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124761", + "assignerOrgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "state": "PUBLISHED", + "assignerShortName": "rt-labs", + "dateReserved": "2026-11-09T12:48:59.072Z", + "datePublished": "2026-11-13T13:24:02.359Z", + "dateUpdated": "2026-11-13T13:24:02.359Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "shortName": "rt-labs", + "dateUpdated": "2026-11-13T13:24:02.359Z" + }, + "title": "A DCP Set of the IP suite that is refused is still stored", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-696", + "description": "CWE-696 Incorrect Behavior Order", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "RT-Labs", + "product": "P-Net", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.0.4", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "P-Net before 1.0.4 copies the IP suite of a DCP Set request to the current and the non-volatile configuration, and starts saving it, before the state of the device is checked. If the request is refused, for example because an Application Relationship is active, the configuration is not restored and is still saved. After a restart the device uses the refused address, and may not answer the controller or may use its address. A host with ADJACENT network access can use this while an Application Relationship is active.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

P-Net before 1.0.4 copies the IP suite of a DCP Set request to the current and the non-volatile configuration, and starts saving it, before the state of the device is checked. If the request is refused, for example because an Application Relationship is active, the configuration is not restored and is still saved. After a restart the device uses the refused address, and may not answer the controller or may use its address. A host with ADJACENT network access can use this while an Application Relationship is active.

" + } + ] + } + ], + "references": [ + { + "url": "https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf", + "name": "Cybersecurity advisory for P-Net" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to P-Net 1.0.4 or later.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade to P-Net 1.0.4 or later.

" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Aditya Gupta (Attify - attify.com)", + "type": "finder" + } + ], + "source": { + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124762.json b/data/2026/124xxx/CVE-2026-124762.json new file mode 100644 index 0000000000..ec90a07b53 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124762.json @@ -0,0 +1,146 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124762", + "assignerOrgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "state": "PUBLISHED", + "assignerShortName": "rt-labs", + "dateReserved": "2026-11-09T12:48:59.072Z", + "datePublished": "2026-11-13T13:24:25.680Z", + "dateUpdated": "2026-11-13T13:24:25.680Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "shortName": "rt-labs", + "dateUpdated": "2026-11-13T13:24:25.680Z" + }, + "title": "RPC reject, fault and cancel PDUs abort an Application Relationship", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-346", + "description": "CWE-346 Origin Validation Error", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "RT-Labs", + "product": "P-Net", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.0.4", + "versionType": "semver" + }, + { + "status": "affected", + "version": "1.0.4", + "lessThan": "*", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or cancel PDU for the session aborts the Application Relationship, without checking that the PDU is the answer to a call of the device or where it comes from. A host with ADJACENT network access that has observed the activity UUID of the connection, which is sent in clear in every RPC request, can abort the Application Relationship with one PDU. It also allocates a session for an unknown activity UUID and changes the address stored for an existing session.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or cancel PDU for the session aborts the Application Relationship, without checking that the PDU is the answer to a call of the device or where it comes from. A host with ADJACENT network access that has observed the activity UUID of the connection, which is sent in clear in every RPC request, can abort the Application Relationship with one PDU. It also allocates a session for an unknown activity UUID and changes the address stored for an existing session.

" + } + ] + } + ], + "references": [ + { + "url": "https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf", + "name": "Cybersecurity advisory for P-Net" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6, + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to P-Net 1.0.4 or later, which only handles a reject or fault as the answer to a call of the device and ignores a cancel. It reduces the risk but does not remove it, see Remaining Risk.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade to P-Net 1.0.4 or later, which only handles a reject or fault as the answer to a call of the device and ignores a cancel. It reduces the risk but does not remove it, see Remaining Risk.

" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Aditya Gupta (Attify - attify.com)", + "type": "finder" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "workarounds": [ + { + "lang": "en", + "value": "Isolate the network of the device from untrusted hosts, for example by a firewall or a separate network,. The remaining risk is that a host that has observed the activity UUID and the sequence number of a pending call of the device can still send a forged reject or fault.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Isolate the network of the device from untrusted hosts, for example by a firewall or a separate network,. The remaining risk is that a host that has observed the activity UUID and the sequence number of a pending call of the device can still send a forged reject or fault.

" + } + ] + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124854.json b/data/2026/124xxx/CVE-2026-124854.json index dd2ca611d4..a0320a4fb5 100644 --- a/data/2026/124xxx/CVE-2026-124854.json +++ b/data/2026/124xxx/CVE-2026-124854.json @@ -8,7 +8,7 @@ "assignerShortName": "mozilla", "dateReserved": "2026-11-09T14:45:04.237Z", "datePublished": "2026-11-10T13:28:04.635Z", - "dateUpdated": "2026-11-13T05:02:52.160Z" + "dateUpdated": "2026-11-13T13:55:02.878Z" }, "containers": { "cna": { @@ -95,13 +95,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-269", + "lang": "en", + "description": "CWE-269 Improper Privilege Management" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.8, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "REQUIRED", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:52.937831Z", + "id": "CVE-2026-124854", "options": [ { "Exploitation": "none" @@ -114,16 +142,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-124854" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:52.160Z" + "dateUpdated": "2026-11-13T13:55:02.878Z" } } ] diff --git a/data/2026/124xxx/CVE-2026-124951.json b/data/2026/124xxx/CVE-2026-124951.json index 3d9a3fb661..1e9bc786cf 100644 --- a/data/2026/124xxx/CVE-2026-124951.json +++ b/data/2026/124xxx/CVE-2026-124951.json @@ -8,7 +8,7 @@ "assignerShortName": "mozilla", "dateReserved": "2026-11-09T14:48:37.018Z", "datePublished": "2026-11-10T13:28:48.946Z", - "dateUpdated": "2026-11-13T05:02:39.159Z" + "dateUpdated": "2026-11-13T13:54:28.354Z" }, "containers": { "cna": { @@ -95,13 +95,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-269", + "lang": "en", + "description": "CWE-269 Improper Privilege Management" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.8, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "REQUIRED", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:39.949531Z", + "id": "CVE-2026-124951", "options": [ { "Exploitation": "none" @@ -114,16 +142,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-124951" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:39.159Z" + "dateUpdated": "2026-11-13T13:54:28.354Z" } } ] diff --git a/data/2026/124xxx/CVE-2026-124999.json b/data/2026/124xxx/CVE-2026-124999.json index 2f182cc2a8..02031be0d1 100644 --- a/data/2026/124xxx/CVE-2026-124999.json +++ b/data/2026/124xxx/CVE-2026-124999.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-09T15:38:53.810Z", "datePublished": "2026-11-09T22:00:21.886Z", - "dateUpdated": "2026-11-09T22:00:21.886Z" + "dateUpdated": "2026-11-13T13:25:22.188Z" }, "containers": { "cna": { @@ -198,6 +198,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:24:12.953005Z", + "id": "CVE-2026-124999", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:25:22.188Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125106.json b/data/2026/125xxx/CVE-2026-125106.json index 71d29e41e6..cea5712a7d 100644 --- a/data/2026/125xxx/CVE-2026-125106.json +++ b/data/2026/125xxx/CVE-2026-125106.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-09T17:45:35.935Z", "datePublished": "2026-11-09T21:27:36.303Z", - "dateUpdated": "2026-11-09T21:27:36.303Z" + "dateUpdated": "2026-11-13T13:18:15.646Z" }, "containers": { "cna": { @@ -147,6 +147,40 @@ "advisory": "GHSA-jm5p-837g-rv8g", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:16:36.567252Z", + "id": "CVE-2026-125106", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:18:15.646Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125108.json b/data/2026/125xxx/CVE-2026-125108.json index 02b95c992a..c794f92cbe 100644 --- a/data/2026/125xxx/CVE-2026-125108.json +++ b/data/2026/125xxx/CVE-2026-125108.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-09T17:45:35.935Z", "datePublished": "2026-11-09T21:55:20.600Z", - "dateUpdated": "2026-11-09T21:55:20.600Z" + "dateUpdated": "2026-11-13T13:22:27.675Z" }, "containers": { "cna": { @@ -129,6 +129,40 @@ "advisory": "GHSA-p8x9-v4hv-2w4g", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:22:10.976638Z", + "id": "CVE-2026-125108", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:22:27.675Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125112.json b/data/2026/125xxx/CVE-2026-125112.json index 790c1e88cb..07f551032d 100644 --- a/data/2026/125xxx/CVE-2026-125112.json +++ b/data/2026/125xxx/CVE-2026-125112.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-09T17:45:35.936Z", "datePublished": "2026-11-09T22:08:05.450Z", - "dateUpdated": "2026-11-09T22:08:05.450Z" + "dateUpdated": "2026-11-13T13:31:04.010Z" }, "containers": { "cna": { @@ -131,6 +131,40 @@ "advisory": "GHSA-xjw9-38cr-6372", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:30:15.854888Z", + "id": "CVE-2026-125112", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:31:04.010Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125116.json b/data/2026/125xxx/CVE-2026-125116.json index e5670ee446..851fea55ab 100644 --- a/data/2026/125xxx/CVE-2026-125116.json +++ b/data/2026/125xxx/CVE-2026-125116.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-09T17:45:35.936Z", "datePublished": "2026-11-09T22:20:28.483Z", - "dateUpdated": "2026-11-09T22:20:28.483Z" + "dateUpdated": "2026-11-13T13:37:18.947Z" }, "containers": { "cna": { @@ -161,6 +161,48 @@ "advisory": "GHSA-wr5m-5jph-8m96", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/Automattic/mongoose/security/advisories/GHSA-wr5m-5jph-8m96", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:36:48.655399Z", + "id": "CVE-2026-125116", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:37:18.947Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125120.json b/data/2026/125xxx/CVE-2026-125120.json index d5bec2f5cd..5286ef17f3 100644 --- a/data/2026/125xxx/CVE-2026-125120.json +++ b/data/2026/125xxx/CVE-2026-125120.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-09T17:45:35.936Z", "datePublished": "2026-11-09T22:36:16.207Z", - "dateUpdated": "2026-11-09T22:36:16.207Z" + "dateUpdated": "2026-11-13T13:40:53.316Z" }, "containers": { "cna": { @@ -147,6 +147,40 @@ "advisory": "GHSA-pcrw-h46h-c93h", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:38:54.842323Z", + "id": "CVE-2026-125120", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:40:53.316Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125214.json b/data/2026/125xxx/CVE-2026-125214.json index 416eadaed2..2ad9c3f75e 100644 --- a/data/2026/125xxx/CVE-2026-125214.json +++ b/data/2026/125xxx/CVE-2026-125214.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:17.009Z", "datePublished": "2026-11-09T19:11:30.282Z", - "dateUpdated": "2026-11-09T19:11:30.282Z" + "dateUpdated": "2026-11-13T14:12:48.298Z" }, "containers": { "cna": { @@ -159,6 +159,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:11:24.456451Z", + "id": "CVE-2026-125214", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:12:48.298Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125358.json b/data/2026/125xxx/CVE-2026-125358.json index 2210f4deac..0259ce7667 100644 --- a/data/2026/125xxx/CVE-2026-125358.json +++ b/data/2026/125xxx/CVE-2026-125358.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:02:59.524Z", "datePublished": "2026-11-09T23:27:32.693Z", - "dateUpdated": "2026-11-09T23:27:32.693Z" + "dateUpdated": "2026-11-13T13:44:06.725Z" }, "containers": { "cna": { @@ -130,6 +130,48 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/rehan-remade/universal-modder/security/advisories/GHSA-wjf6-3h6v-4gq9", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:42:39.044986Z", + "id": "CVE-2026-125358", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:44:06.725Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125362.json b/data/2026/125xxx/CVE-2026-125362.json index 59bd2a1810..f9a288dabf 100644 --- a/data/2026/125xxx/CVE-2026-125362.json +++ b/data/2026/125xxx/CVE-2026-125362.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:03:00.945Z", "datePublished": "2026-11-09T23:27:35.716Z", - "dateUpdated": "2026-11-09T23:27:35.716Z" + "dateUpdated": "2026-11-13T13:46:40.769Z" }, "containers": { "cna": { @@ -135,6 +135,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:46:20.120732Z", + "id": "CVE-2026-125362", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:46:40.769Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125366.json b/data/2026/125xxx/CVE-2026-125366.json index 049a0e8dd3..eacd80861c 100644 --- a/data/2026/125xxx/CVE-2026-125366.json +++ b/data/2026/125xxx/CVE-2026-125366.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:03:02.429Z", "datePublished": "2026-11-09T23:27:39.142Z", - "dateUpdated": "2026-11-09T23:27:39.142Z" + "dateUpdated": "2026-11-13T13:49:02.343Z" }, "containers": { "cna": { @@ -136,6 +136,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:48:32.241677Z", + "id": "CVE-2026-125366", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:49:02.343Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125370.json b/data/2026/125xxx/CVE-2026-125370.json index 12c3941c32..591ff954d5 100644 --- a/data/2026/125xxx/CVE-2026-125370.json +++ b/data/2026/125xxx/CVE-2026-125370.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:03:03.950Z", "datePublished": "2026-11-09T23:27:41.949Z", - "dateUpdated": "2026-11-11T11:53:11.145Z" + "dateUpdated": "2026-11-13T13:52:37.225Z" }, "containers": { "cna": { @@ -129,6 +129,48 @@ "shortName": "VulnCheck", "dateUpdated": "2026-11-11T11:53:11.145Z" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/kubero-dev/kubero/issues/786", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:51:49.417374Z", + "id": "CVE-2026-125370", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:52:37.225Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125374.json b/data/2026/125xxx/CVE-2026-125374.json index dce043eda8..591cf3dade 100644 --- a/data/2026/125xxx/CVE-2026-125374.json +++ b/data/2026/125xxx/CVE-2026-125374.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:03:05.404Z", "datePublished": "2026-11-09T23:27:44.695Z", - "dateUpdated": "2026-11-09T23:27:44.695Z" + "dateUpdated": "2026-11-13T13:58:37.512Z" }, "containers": { "cna": { @@ -148,6 +148,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:56:09.442904Z", + "id": "CVE-2026-125374", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:58:37.512Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125800.json b/data/2026/125xxx/CVE-2026-125800.json new file mode 100644 index 0000000000..1de002cbe9 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125800.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125800", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.986Z", + "datePublished": "2026-11-13T13:16:41.564Z", + "dateUpdated": "2026-11-13T13:16:41.564Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T13:16:41.564Z" + }, + "title": "WordPress Spectra plugin <= 2.20.5 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-13T13:06:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Stored XSS.This issue affects Spectra: from n/a through 2.20.5.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Stored XSS.

This issue affects Spectra: from n/a through 2.20.5.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Brainstorm Force", + "product": "Spectra", + "packageName": "ultimate-addons-for-gutenberg", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.20.5", + "changes": [ + { + "at": "2.20.6", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ultimate-addons-for-gutenberg/vulnerability/wordpress-spectra-plugin-2-20-5-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Khanh Nguyen | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Spectra plugin to the latest available version (at least 2.20.6).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Spectra plugin to the latest available version (at least 2.20.6)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126182.json b/data/2026/126xxx/CVE-2026-126182.json index f9d1e193cc..5961613ac3 100644 --- a/data/2026/126xxx/CVE-2026-126182.json +++ b/data/2026/126xxx/CVE-2026-126182.json @@ -8,7 +8,7 @@ "assignerShortName": "fortinet", "dateReserved": "2026-11-10T20:07:32.844Z", "datePublished": "2026-11-11T21:30:30.930Z", - "dateUpdated": "2026-11-13T05:01:11.102Z" + "dateUpdated": "2026-11-13T13:52:15.927Z" }, "containers": { "cna": { @@ -205,13 +205,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:11.869303Z", + "id": "CVE-2026-126182", "options": [ { "Exploitation": "none" @@ -224,16 +224,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-126182" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:11.102Z" + "dateUpdated": "2026-11-13T13:52:15.927Z" } } ] diff --git a/data/2026/126xxx/CVE-2026-126213.json b/data/2026/126xxx/CVE-2026-126213.json index e12eb2e3b8..bd8c3b8056 100644 --- a/data/2026/126xxx/CVE-2026-126213.json +++ b/data/2026/126xxx/CVE-2026-126213.json @@ -8,7 +8,7 @@ "assignerShortName": "fortinet", "dateReserved": "2026-11-10T20:07:56.227Z", "datePublished": "2026-11-11T21:31:03.916Z", - "dateUpdated": "2026-11-13T11:05:09.836Z" + "dateUpdated": "2026-11-13T14:08:31.246Z" }, "containers": { "cna": { @@ -161,7 +161,6 @@ "cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*", - "cpe:2.3:o:fortinet:fortianalyzer:7.4.12:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*", @@ -174,7 +173,6 @@ "cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*", - "cpe:2.3:o:fortinet:fortianalyzer:7.2.13:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*", @@ -206,13 +204,13 @@ { "versionType": "semver", "version": "7.4.0", - "lessThanOrEqual": "7.4.12", + "lessThanOrEqual": "7.4.11", "status": "affected" }, { "versionType": "semver", "version": "7.2.0", - "lessThanOrEqual": "7.2.13", + "lessThanOrEqual": "7.2.12", "status": "affected" } ] @@ -287,13 +285,13 @@ "descriptions": [ { "lang": "en", - "value": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker to execute unauthorized SQL commands via specially crafted requests." + "value": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker to execute unauthorized SQL commands via specially crafted requests." } ], "providerMetadata": { "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", - "dateUpdated": "2026-11-13T11:05:09.836Z" + "dateUpdated": "2026-11-13T14:08:31.246Z" }, "problemTypes": [ { @@ -329,7 +327,7 @@ "solutions": [ { "lang": "en", - "value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above" + "value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above" } ], "references": [ diff --git a/data/2026/126xxx/CVE-2026-126261.json b/data/2026/126xxx/CVE-2026-126261.json index f9992a1db0..e940ea3823 100644 --- a/data/2026/126xxx/CVE-2026-126261.json +++ b/data/2026/126xxx/CVE-2026-126261.json @@ -8,7 +8,7 @@ "assignerShortName": "fortinet", "dateReserved": "2026-11-10T20:10:15.229Z", "datePublished": "2026-11-10T22:23:59.410Z", - "dateUpdated": "2026-11-10T22:36:52.627Z" + "dateUpdated": "2026-11-13T13:34:05.873Z" }, "containers": { "cna": { @@ -123,6 +123,40 @@ "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-275" } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:33:51.018334Z", + "id": "CVE-2026-126261", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:34:05.873Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127122.json b/data/2026/127xxx/CVE-2026-127122.json new file mode 100644 index 0000000000..928359e25b --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127122.json @@ -0,0 +1,133 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127122", + "assignerOrgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "state": "PUBLISHED", + "assignerShortName": "rt-labs", + "dateReserved": "2026-11-12T15:30:49.638Z", + "datePublished": "2026-11-13T13:24:43.878Z", + "dateUpdated": "2026-11-13T13:24:43.878Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "shortName": "rt-labs", + "dateUpdated": "2026-11-13T13:24:43.878Z" + }, + "title": "Out-of-bounds write with too many MCR blocks in a Connect request", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-787", + "description": "CWE-787 Out-of-bounds Write", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "RT-Labs", + "product": "P-Net", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.0.4", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "P-Net before 1.0.4 does not check the number of MCR request blocks in a Connect request against the number of multicast communication relations that an Application Relationship has room for (PNET_MAX_MC_CR, 1 by default). Each further block is written past the end of the array, into the rest of the Application Relationship and, with more blocks, into the following one. The written data comes from the request. No established Application Relationship is needed, and the attacker requires ADJACENT network access. Builds with PNET_OPTION_MC_CR disabled are not affected.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

P-Net before 1.0.4 does not check the number of MCR request blocks in a Connect request against the number of multicast communication relations that an Application Relationship has room for (PNET_MAX_MC_CR, 1 by default). Each further block is written past the end of the array, into the rest of the Application Relationship and, with more blocks, into the following one. The written data comes from the request. No established Application Relationship is needed, and the attacker requires ADJACENT network access. Builds with PNET_OPTION_MC_CR disabled are not affected.

" + } + ] + } + ], + "references": [ + { + "url": "https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf", + "name": "Cybersecurity advisory for P-Net" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7.2, + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to P-Net 1.0.4 or later.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade to P-Net 1.0.4 or later.

" + } + ] + } + ], + "source": { + "discovery": "INTERNAL" + }, + "workarounds": [ + { + "lang": "en", + "value": "Build P-Net with PNET_OPTION_MC_CR disabled. Multicast communication relations are not supported by P-Net, and a Connect request with MCR blocks is then rejected.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Build P-Net with PNET_OPTION_MC_CR disabled. Multicast communication relations are not supported by P-Net, and a Connect request with MCR blocks is then rejected.

" + } + ] + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127123.json b/data/2026/127xxx/CVE-2026-127123.json new file mode 100644 index 0000000000..2573a44d1f --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127123.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127123", + "assignerOrgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "state": "PUBLISHED", + "assignerShortName": "rt-labs", + "dateReserved": "2026-11-12T15:30:49.638Z", + "datePublished": "2026-11-13T13:25:10.082Z", + "dateUpdated": "2026-11-13T13:25:10.082Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "shortName": "rt-labs", + "dateUpdated": "2026-11-13T13:25:10.082Z" + }, + "title": "Fragment with another data representation releases an Application Relationship", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-404", + "description": "CWE-404 Improper Resource Shutdown or Release", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "RT-Labs", + "product": "P-Net", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.0.4", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "P-Net before 1.0.4 releases the Application Relationship of an RPC session, without the abort procedure, when a fragment of a request has another data representation (endianness) than the first fragment of the call. The application is not told that the Application Relationship is gone, the cyclic data stops, and the resources of the Application Relationship are left referencing a cleared structure. Another host can then connect in its place. A host with ADJACENT network access that has observed the activity UUID of the connection, which is sent in clear in every RPC request, can do this with one PDU.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

P-Net before 1.0.4 releases the Application Relationship of an RPC session, without the abort procedure, when a fragment of a request has another data representation (endianness) than the first fragment of the call. The application is not told that the Application Relationship is gone, the cyclic data stops, and the resources of the Application Relationship are left referencing a cleared structure. Another host can then connect in its place. A host with ADJACENT network access that has observed the activity UUID of the connection, which is sent in clear in every RPC request, can do this with one PDU.

" + } + ] + } + ], + "references": [ + { + "url": "https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf", + "name": "Cybersecurity advisory for P-Net" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6, + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to P-Net 1.0.4 or later.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade to P-Net 1.0.4 or later.

" + } + ] + } + ], + "source": { + "discovery": "INTERNAL" + } + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127124.json b/data/2026/127xxx/CVE-2026-127124.json new file mode 100644 index 0000000000..21fe3477ff --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127124.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127124", + "assignerOrgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "state": "PUBLISHED", + "assignerShortName": "rt-labs", + "dateReserved": "2026-11-12T15:30:49.638Z", + "datePublished": "2026-11-13T13:25:33.021Z", + "dateUpdated": "2026-11-13T13:25:33.021Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "shortName": "rt-labs", + "dateUpdated": "2026-11-13T13:25:33.021Z" + }, + "title": "RPC session pool exhausted by unfinished fragmented requests", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-772", + "description": "CWE-772 Missing Release of Resource after Effective Lifetime", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "RT-Labs", + "product": "P-Net", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.0.4", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "P-Net before 1.0.4 keeps the RPC session that is allocated for a fragment of a request with an unknown activity UUID, without a timeout, when the rest of the request never arrives. A session that does not get an Application Relationship is also kept after the response. Repeated fragments or requests with different activity UUIDs exhaust the available sessions, one UDP packet per session. Once they are exhausted the device no longer answers a Connect request until it is restarted. An unauthenticated attacker with ADJACENT network access can use this to cause a denial of service.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

P-Net before 1.0.4 keeps the RPC session that is allocated for a fragment of a request with an unknown activity UUID, without a timeout, when the rest of the request never arrives. A session that does not get an Application Relationship is also kept after the response. Repeated fragments or requests with different activity UUIDs exhaust the available sessions, one UDP packet per session. Once they are exhausted the device no longer answers a Connect request until it is restarted. An unauthenticated attacker with ADJACENT network access can use this to cause a denial of service.

" + } + ] + } + ], + "references": [ + { + "url": "https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf", + "name": "Cybersecurity advisory for P-Net" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to P-Net 1.0.4 or later.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade to P-Net 1.0.4 or later.

" + } + ] + } + ], + "source": { + "discovery": "INTERNAL" + } + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127125.json b/data/2026/127xxx/CVE-2026-127125.json new file mode 100644 index 0000000000..e6ba35acfd --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127125.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127125", + "assignerOrgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "state": "PUBLISHED", + "assignerShortName": "rt-labs", + "dateReserved": "2026-11-12T15:30:49.638Z", + "datePublished": "2026-11-13T13:25:53.422Z", + "dateUpdated": "2026-11-13T13:25:53.422Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4b71179a-3b92-4a9d-b9fc-af8b8ed579ee", + "shortName": "rt-labs", + "dateUpdated": "2026-11-13T13:25:53.422Z" + }, + "title": "NULL pointer dereference when a response fragment is not acknowledged", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-476", + "description": "CWE-476 NULL Pointer Dereference", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "RT-Labs", + "product": "P-Net", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.0.4", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "P-Net before 1.0.4 aborts the Application Relationship of an RPC session when a fragment of a response has been resent without being acknowledged, without checking that the session has an Application Relationship. A request for an existing Application Relationship that is sent on another activity than its Connect, and gets a fragmented response, is handled on a session without one. If the response is not acknowledged, a NULL pointer is dereferenced and the device crashes. A conformant IO-controller does not send such requests. The attacker must have observed the AR UUID of an established Application Relationship and requires ADJACENT network access.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

P-Net before 1.0.4 aborts the Application Relationship of an RPC session when a fragment of a response has been resent without being acknowledged, without checking that the session has an Application Relationship. A request for an existing Application Relationship that is sent on another activity than its Connect, and gets a fragmented response, is handled on a session without one. If the response is not acknowledged, a NULL pointer is dereferenced and the device crashes. A conformant IO-controller does not send such requests. The attacker must have observed the AR UUID of an established Application Relationship and requires ADJACENT network access.

" + } + ] + } + ], + "references": [ + { + "url": "https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf", + "name": "Cybersecurity advisory for P-Net" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6, + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to P-Net 1.0.4 or later.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade to P-Net 1.0.4 or later.

" + } + ] + } + ], + "source": { + "discovery": "INTERNAL" + } + } + } +} \ No newline at end of file diff --git a/data/2026/128xxx/CVE-2026-128790.json b/data/2026/128xxx/CVE-2026-128790.json new file mode 100644 index 0000000000..8b210b186d --- /dev/null +++ b/data/2026/128xxx/CVE-2026-128790.json @@ -0,0 +1,148 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-128790", + "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "state": "PUBLISHED", + "assignerShortName": "eclipse", + "dateReserved": "2026-11-13T07:53:13.412Z", + "datePublished": "2026-11-13T14:12:17.843Z", + "dateUpdated": "2026-11-13T14:12:17.843Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "shortName": "eclipse", + "dateUpdated": "2026-11-13T14:12:17.843Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-863", + "description": "CWE-863", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-200", + "description": "CWE-200", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-1", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-1" + } + ] + } + ], + "affected": [ + { + "vendor": "Eclipse Foundation", + "product": "Eclipse BaSyx Go Components", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.1.3", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Eclipse BaSyx Go Components versions up to and including 1.1.2, ABAC-enabled deployments of the Submodel Repository and the AAS Environment do not apply an access rule's `FILTERLIST` fragment filters to single Submodel reads.\n\n\n\n`GET /submodels` removes the fields that a rule's `FILTERLIST` hides, but `GET /submodels/{submodelIdentifier}` and `GET /submodels/{submodelIdentifier}/$metadata` return them unfiltered. An authenticated caller with READ access to a Submodel can therefore read fields that the access rules hide from them, for example `supplementalSemanticIds` keys that name the other parties allowed to read the Submodel.\n\n\n\nIf versioning is enabled (`history.mode` set to `api` or `audit`), `GET /submodels/{submodelIdentifier}/$history` and `GET /shells/{aasIdentifier}/$history` in the Submodel Repository, AAS Repository and AAS Environment return the complete stored version without applying the rule's formula or fragment filters. A caller whose rules grant READ on these routes can read fields that the access rules hide, and Submodels and Asset Administration Shells that the direct read does not return to them at all.\n\n\n\nThe issue is fixed in Eclipse BaSyx Go Components v1.1.3.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Eclipse BaSyx Go Components versions up to and including 1.1.2, ABAC-enabled deployments of the Submodel Repository and the AAS Environment do not apply an access rule's `FILTERLIST` fragment filters to single Submodel reads.

`GET /submodels` removes the fields that a rule's `FILTERLIST` hides, but `GET /submodels/{submodelIdentifier}` and `GET /submodels/{submodelIdentifier}/$metadata` return them unfiltered. An authenticated caller with READ access to a Submodel can therefore read fields that the access rules hide from them, for example `supplementalSemanticIds` keys that name the other parties allowed to read the Submodel.

If versioning is enabled (`history.mode` set to `api` or `audit`), `GET /submodels/{submodelIdentifier}/$history` and `GET /shells/{aasIdentifier}/$history` in the Submodel Repository, AAS Repository and AAS Environment return the complete stored version without applying the rule's formula or fragment filters. A caller whose rules grant READ on these routes can read fields that the access rules hide, and Submodels and Asset Administration Shells that the direct read does not return to them at all.

The issue is fixed in Eclipse BaSyx Go Components v1.1.3.

" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/1371#note_8664220" + }, + { + "url": "https://github.com/eclipse-basyx/basyx-go-components/pull/855" + }, + { + "url": "https://github.com/eclipse-basyx/basyx-go-components/pull/883" + }, + { + "url": "https://github.com/eclipse-basyx/basyx-go-components/releases/tag/v1.1.3" + }, + { + "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/577" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Eric Nowak", + "type": "finder" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/44xxx/CVE-2026-44685.json b/data/2026/44xxx/CVE-2026-44685.json index 71ae28e051..130697f4db 100644 --- a/data/2026/44xxx/CVE-2026-44685.json +++ b/data/2026/44xxx/CVE-2026-44685.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-14T22:09:54.074Z", "datePublished": "2026-11-10T17:45:48.332Z", - "dateUpdated": "2026-11-13T04:59:01.187Z" + "dateUpdated": "2026-11-13T13:56:13.294Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:02.779046Z", + "id": "CVE-2026-44685", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-44685" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:01.187Z" + "dateUpdated": "2026-11-13T13:56:13.294Z" } } ] diff --git a/data/2026/50xxx/CVE-2026-50175.json b/data/2026/50xxx/CVE-2026-50175.json index aa9f8a6ae3..0231b84cf8 100644 --- a/data/2026/50xxx/CVE-2026-50175.json +++ b/data/2026/50xxx/CVE-2026-50175.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-06-23T03:00:05.174Z", "datePublished": "2026-11-10T17:46:00.552Z", - "dateUpdated": "2026-11-13T04:59:03.143Z" + "dateUpdated": "2026-11-13T13:55:56.803Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:04.052241Z", + "id": "CVE-2026-50175", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-50175" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:03.143Z" + "dateUpdated": "2026-11-13T13:55:56.803Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56432.json b/data/2026/56xxx/CVE-2026-56432.json index 1098b56630..f2d64f279d 100644 --- a/data/2026/56xxx/CVE-2026-56432.json +++ b/data/2026/56xxx/CVE-2026-56432.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-14T22:12:36.536Z", "datePublished": "2026-11-10T17:46:20.132Z", - "dateUpdated": "2026-11-13T04:59:05.784Z" + "dateUpdated": "2026-11-13T13:55:41.875Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:06.586103Z", + "id": "CVE-2026-56432", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56432" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:05.784Z" + "dateUpdated": "2026-11-13T13:55:41.875Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56435.json b/data/2026/56xxx/CVE-2026-56435.json index 8ed686c996..5ce6842ea8 100644 --- a/data/2026/56xxx/CVE-2026-56435.json +++ b/data/2026/56xxx/CVE-2026-56435.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-06-30T03:00:12.021Z", "datePublished": "2026-11-10T17:46:23.837Z", - "dateUpdated": "2026-11-13T04:59:08.102Z" + "dateUpdated": "2026-11-13T13:55:27.371Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:08.867598Z", + "id": "CVE-2026-56435", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56435" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:08.102Z" + "dateUpdated": "2026-11-13T13:55:27.371Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56759.json b/data/2026/56xxx/CVE-2026-56759.json index 6bf799bdd5..d31d061d86 100644 --- a/data/2026/56xxx/CVE-2026-56759.json +++ b/data/2026/56xxx/CVE-2026-56759.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-15T03:00:03.704Z", "datePublished": "2026-11-10T17:46:33.076Z", - "dateUpdated": "2026-11-13T04:59:11.479Z" + "dateUpdated": "2026-11-13T13:55:12.974Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:12.597603Z", + "id": "CVE-2026-56759", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56759" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:11.479Z" + "dateUpdated": "2026-11-13T13:55:12.974Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56938.json b/data/2026/56xxx/CVE-2026-56938.json index 8fce88ed3a..e6a03ceb4c 100644 --- a/data/2026/56xxx/CVE-2026-56938.json +++ b/data/2026/56xxx/CVE-2026-56938.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:13:58.907Z", "datePublished": "2026-11-10T19:20:46.870Z", - "dateUpdated": "2026-11-13T05:00:40.123Z" + "dateUpdated": "2026-11-13T14:06:27.924Z" }, "containers": { "cna": { @@ -57,13 +57,47 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-362", + "lang": "en", + "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" + }, + { + "type": "CWE", + "cweId": "CWE-416", + "lang": "en", + "description": "CWE-416 Use After Free" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "HIGH", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:40.915521Z", + "id": "CVE-2026-56938", "options": [ { "Exploitation": "none" @@ -76,16 +110,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56938" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:40.123Z" + "dateUpdated": "2026-11-13T14:06:27.924Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56944.json b/data/2026/56xxx/CVE-2026-56944.json index 5848f7bf14..607ea8990c 100644 --- a/data/2026/56xxx/CVE-2026-56944.json +++ b/data/2026/56xxx/CVE-2026-56944.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:13:58.908Z", "datePublished": "2026-11-10T19:20:49.887Z", - "dateUpdated": "2026-11-13T05:00:41.240Z" + "dateUpdated": "2026-11-13T14:08:07.470Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-416", + "lang": "en", + "description": "CWE-416 Use After Free" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:42.069737Z", + "id": "CVE-2026-56944", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56944" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:41.240Z" + "dateUpdated": "2026-11-13T14:08:07.470Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56946.json b/data/2026/56xxx/CVE-2026-56946.json index f6fca40beb..05f3d113ba 100644 --- a/data/2026/56xxx/CVE-2026-56946.json +++ b/data/2026/56xxx/CVE-2026-56946.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:13:58.908Z", "datePublished": "2026-11-10T19:20:50.857Z", - "dateUpdated": "2026-11-13T05:02:18.087Z" + "dateUpdated": "2026-11-13T14:01:29.731Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.7, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "HIGH", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:18.884111Z", + "id": "CVE-2026-56946", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56946" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:18.087Z" + "dateUpdated": "2026-11-13T14:01:29.731Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56969.json b/data/2026/56xxx/CVE-2026-56969.json index 6be88700e8..93e4d05ca1 100644 --- a/data/2026/56xxx/CVE-2026-56969.json +++ b/data/2026/56xxx/CVE-2026-56969.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:20:45.087Z", "datePublished": "2026-11-10T19:20:56.650Z", - "dateUpdated": "2026-11-13T05:01:14.581Z" + "dateUpdated": "2026-11-13T14:05:36.154Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-416", + "lang": "en", + "description": "CWE-416 Use After Free" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:15.368844Z", + "id": "CVE-2026-56969", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56969" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:14.581Z" + "dateUpdated": "2026-11-13T14:05:36.154Z" } } ] diff --git a/data/2026/57xxx/CVE-2026-57010.json b/data/2026/57xxx/CVE-2026-57010.json index 92f47b2bca..7ebee4e462 100644 --- a/data/2026/57xxx/CVE-2026-57010.json +++ b/data/2026/57xxx/CVE-2026-57010.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:26:29.783Z", "datePublished": "2026-11-10T19:21:03.356Z", - "dateUpdated": "2026-11-13T05:01:19.191Z" + "dateUpdated": "2026-11-13T14:12:16.289Z" }, "containers": { "cna": { @@ -57,13 +57,47 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-787", + "lang": "en", + "description": "CWE-787 Out-of-bounds Write" + }, + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:19.983766Z", + "id": "CVE-2026-57010", "options": [ { "Exploitation": "none" @@ -76,16 +110,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-57010" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:19.191Z" + "dateUpdated": "2026-11-13T14:12:16.289Z" } } ] diff --git a/data/2026/57xxx/CVE-2026-57043.json b/data/2026/57xxx/CVE-2026-57043.json index 4825b705b4..573ec6715b 100644 --- a/data/2026/57xxx/CVE-2026-57043.json +++ b/data/2026/57xxx/CVE-2026-57043.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:29:58.945Z", "datePublished": "2026-11-10T19:21:07.172Z", - "dateUpdated": "2026-11-13T05:02:29.344Z" + "dateUpdated": "2026-11-13T14:01:15.267Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.7, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "HIGH", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:30.243920Z", + "id": "CVE-2026-57043", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-57043" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:29.344Z" + "dateUpdated": "2026-11-13T14:01:15.267Z" } } ] diff --git a/data/2026/57xxx/CVE-2026-57048.json b/data/2026/57xxx/CVE-2026-57048.json index df9b10f828..577b505f02 100644 --- a/data/2026/57xxx/CVE-2026-57048.json +++ b/data/2026/57xxx/CVE-2026-57048.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:29:58.946Z", "datePublished": "2026-11-10T19:21:09.106Z", - "dateUpdated": "2026-11-13T05:00:43.621Z" + "dateUpdated": "2026-11-13T14:11:31.845Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.7, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "HIGH", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:44.389473Z", + "id": "CVE-2026-57048", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-57048" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:43.621Z" + "dateUpdated": "2026-11-13T14:11:31.845Z" } } ] diff --git a/data/2026/57xxx/CVE-2026-57882.json b/data/2026/57xxx/CVE-2026-57882.json index 9428672048..7553a2df08 100644 --- a/data/2026/57xxx/CVE-2026-57882.json +++ b/data/2026/57xxx/CVE-2026-57882.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-06-30T03:00:12.024Z", "datePublished": "2026-11-10T17:46:36.852Z", - "dateUpdated": "2026-11-13T04:59:14.303Z" + "dateUpdated": "2026-11-13T13:54:58.417Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:15.172381Z", + "id": "CVE-2026-57882", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-57882" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:14.303Z" + "dateUpdated": "2026-11-13T13:54:58.417Z" } } ] diff --git a/data/2026/57xxx/CVE-2026-57891.json b/data/2026/57xxx/CVE-2026-57891.json index 5b9280808a..4789033da7 100644 --- a/data/2026/57xxx/CVE-2026-57891.json +++ b/data/2026/57xxx/CVE-2026-57891.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-06-30T03:00:12.014Z", "datePublished": "2026-11-10T17:46:46.787Z", - "dateUpdated": "2026-11-13T04:59:15.480Z" + "dateUpdated": "2026-11-13T13:54:44.027Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:16.287815Z", + "id": "CVE-2026-57891", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-57891" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:15.480Z" + "dateUpdated": "2026-11-13T13:54:44.027Z" } } ] diff --git a/data/2026/57xxx/CVE-2026-57892.json b/data/2026/57xxx/CVE-2026-57892.json index 1628ddbd92..4088d89340 100644 --- a/data/2026/57xxx/CVE-2026-57892.json +++ b/data/2026/57xxx/CVE-2026-57892.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-16T22:45:23.637Z", "datePublished": "2026-11-10T17:46:50.571Z", - "dateUpdated": "2026-11-13T04:59:16.625Z" + "dateUpdated": "2026-11-13T13:54:29.498Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:17.455994Z", + "id": "CVE-2026-57892", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-57892" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:16.625Z" + "dateUpdated": "2026-11-13T13:54:29.498Z" } } ] diff --git a/data/2026/57xxx/CVE-2026-57893.json b/data/2026/57xxx/CVE-2026-57893.json index 0467f9ca2a..8884a5873c 100644 --- a/data/2026/57xxx/CVE-2026-57893.json +++ b/data/2026/57xxx/CVE-2026-57893.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-15T03:00:03.681Z", "datePublished": "2026-11-10T17:46:54.357Z", - "dateUpdated": "2026-11-13T04:59:18.967Z" + "dateUpdated": "2026-11-13T13:54:13.959Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:19.839230Z", + "id": "CVE-2026-57893", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-57893" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:18.967Z" + "dateUpdated": "2026-11-13T13:54:13.959Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58680.json b/data/2026/58xxx/CVE-2026-58680.json index 2ec3eff805..2ae1afae01 100644 --- a/data/2026/58xxx/CVE-2026-58680.json +++ b/data/2026/58xxx/CVE-2026-58680.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:34:02.657Z", "datePublished": "2026-11-10T19:21:11.036Z", - "dateUpdated": "2026-11-13T05:01:20.306Z" + "dateUpdated": "2026-11-13T14:11:06.752Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-863", + "lang": "en", + "description": "CWE-863 Incorrect Authorization" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.7, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "HIGH", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:21.082848Z", + "id": "CVE-2026-58680", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58680" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:20.306Z" + "dateUpdated": "2026-11-13T14:11:06.752Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58736.json b/data/2026/58xxx/CVE-2026-58736.json index 6b9ba58b83..9e87f21674 100644 --- a/data/2026/58xxx/CVE-2026-58736.json +++ b/data/2026/58xxx/CVE-2026-58736.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:42:12.104Z", "datePublished": "2026-11-10T19:21:21.830Z", - "dateUpdated": "2026-11-13T05:01:23.258Z" + "dateUpdated": "2026-11-13T14:07:37.403Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-416", + "lang": "en", + "description": "CWE-416 Use After Free" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:24.111210Z", + "id": "CVE-2026-58736", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58736" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:23.258Z" + "dateUpdated": "2026-11-13T14:07:37.403Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58779.json b/data/2026/58xxx/CVE-2026-58779.json index 24c2b2fdcb..fa6a27bdc0 100644 --- a/data/2026/58xxx/CVE-2026-58779.json +++ b/data/2026/58xxx/CVE-2026-58779.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:48:47.082Z", "datePublished": "2026-11-10T19:21:28.536Z", - "dateUpdated": "2026-11-13T05:01:25.752Z" + "dateUpdated": "2026-11-13T14:01:00.229Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.7, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "HIGH", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:26.528034Z", + "id": "CVE-2026-58779", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58779" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:25.752Z" + "dateUpdated": "2026-11-13T14:01:00.229Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58780.json b/data/2026/58xxx/CVE-2026-58780.json index 7d4920a78f..b88db5fd1c 100644 --- a/data/2026/58xxx/CVE-2026-58780.json +++ b/data/2026/58xxx/CVE-2026-58780.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:48:47.082Z", "datePublished": "2026-11-10T19:21:29.494Z", - "dateUpdated": "2026-11-13T05:01:27.982Z" + "dateUpdated": "2026-11-13T14:10:19.874Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-119", + "lang": "en", + "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:28.770818Z", + "id": "CVE-2026-58780", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58780" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:27.982Z" + "dateUpdated": "2026-11-13T14:10:19.874Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58787.json b/data/2026/58xxx/CVE-2026-58787.json index 6a94c2bf27..40057148be 100644 --- a/data/2026/58xxx/CVE-2026-58787.json +++ b/data/2026/58xxx/CVE-2026-58787.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:49:59.328Z", "datePublished": "2026-11-10T19:21:35.267Z", - "dateUpdated": "2026-11-13T05:02:07.169Z" + "dateUpdated": "2026-11-13T14:09:44.710Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-122", + "lang": "en", + "description": "CWE-122 Heap-based Buffer Overflow" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.8, + "attackVector": "ADJACENT_NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:07.978584Z", + "id": "CVE-2026-58787", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58787" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:07.169Z" + "dateUpdated": "2026-11-13T14:09:44.710Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58798.json b/data/2026/58xxx/CVE-2026-58798.json index 0c019e6cfa..08b554f50c 100644 --- a/data/2026/58xxx/CVE-2026-58798.json +++ b/data/2026/58xxx/CVE-2026-58798.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:51:13.097Z", "datePublished": "2026-11-10T19:21:41.987Z", - "dateUpdated": "2026-11-13T05:00:49.561Z" + "dateUpdated": "2026-11-13T14:08:57.207Z" }, "containers": { "cna": { @@ -57,13 +57,47 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-787", + "lang": "en", + "description": "CWE-787 Out-of-bounds Write" + }, + { + "type": "CWE", + "cweId": "CWE-119", + "lang": "en", + "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.8, + "attackVector": "ADJACENT_NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:50.399809Z", + "id": "CVE-2026-58798", "options": [ { "Exploitation": "none" @@ -76,16 +110,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58798" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:49.561Z" + "dateUpdated": "2026-11-13T14:08:57.207Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58800.json b/data/2026/58xxx/CVE-2026-58800.json index 6a3ac846c8..a066c43679 100644 --- a/data/2026/58xxx/CVE-2026-58800.json +++ b/data/2026/58xxx/CVE-2026-58800.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:51:13.097Z", "datePublished": "2026-11-10T19:21:43.935Z", - "dateUpdated": "2026-11-13T05:00:50.741Z" + "dateUpdated": "2026-11-13T14:04:41.074Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-416", + "lang": "en", + "description": "CWE-416 Use After Free" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:51.542636Z", + "id": "CVE-2026-58800", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58800" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:50.741Z" + "dateUpdated": "2026-11-13T14:04:41.074Z" } } ] diff --git a/data/2026/59xxx/CVE-2026-59598.json b/data/2026/59xxx/CVE-2026-59598.json index 1de18282f7..0016fc1d7f 100644 --- a/data/2026/59xxx/CVE-2026-59598.json +++ b/data/2026/59xxx/CVE-2026-59598.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:25:53.894Z", "datePublished": "2026-11-10T19:22:12.793Z", - "dateUpdated": "2026-11-13T05:01:41.985Z" + "dateUpdated": "2026-11-13T14:02:54.173Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-416", + "lang": "en", + "description": "CWE-416 Use After Free" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:42.787047Z", + "id": "CVE-2026-59598", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-59598" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:41.985Z" + "dateUpdated": "2026-11-13T14:02:54.173Z" } } ] diff --git a/data/2026/59xxx/CVE-2026-59609.json b/data/2026/59xxx/CVE-2026-59609.json index 87dcdaed63..5d78139407 100644 --- a/data/2026/59xxx/CVE-2026-59609.json +++ b/data/2026/59xxx/CVE-2026-59609.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:27:19.075Z", "datePublished": "2026-11-10T19:22:20.438Z", - "dateUpdated": "2026-11-13T05:01:47.869Z" + "dateUpdated": "2026-11-13T14:02:08.579Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-416", + "lang": "en", + "description": "CWE-416 Use After Free" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:48.637521Z", + "id": "CVE-2026-59609", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-59609" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:47.869Z" + "dateUpdated": "2026-11-13T14:02:08.579Z" } } ] diff --git a/data/2026/60xxx/CVE-2026-60138.json b/data/2026/60xxx/CVE-2026-60138.json index ce3d1b2640..fc6052d4fb 100644 --- a/data/2026/60xxx/CVE-2026-60138.json +++ b/data/2026/60xxx/CVE-2026-60138.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-14T22:12:36.514Z", "datePublished": "2026-11-10T17:47:18.447Z", - "dateUpdated": "2026-11-13T04:59:25.837Z" + "dateUpdated": "2026-11-13T13:53:59.493Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:26.678451Z", + "id": "CVE-2026-60138", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-60138" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:25.837Z" + "dateUpdated": "2026-11-13T13:53:59.493Z" } } ] diff --git a/data/2026/60xxx/CVE-2026-60142.json b/data/2026/60xxx/CVE-2026-60142.json index dc921a89b8..b5de38ec3d 100644 --- a/data/2026/60xxx/CVE-2026-60142.json +++ b/data/2026/60xxx/CVE-2026-60142.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-15T03:00:03.697Z", "datePublished": "2026-11-10T17:47:31.218Z", - "dateUpdated": "2026-11-13T04:59:27.127Z" + "dateUpdated": "2026-11-13T13:53:45.056Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:27.891827Z", + "id": "CVE-2026-60142", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-60142" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:27.127Z" + "dateUpdated": "2026-11-13T13:53:45.056Z" } } ] diff --git a/data/2026/61xxx/CVE-2026-61467.json b/data/2026/61xxx/CVE-2026-61467.json index 58bc84fe96..07ed502454 100644 --- a/data/2026/61xxx/CVE-2026-61467.json +++ b/data/2026/61xxx/CVE-2026-61467.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-21T03:00:03.907Z", "datePublished": "2026-11-10T17:47:44.385Z", - "dateUpdated": "2026-11-13T04:59:31.838Z" + "dateUpdated": "2026-11-13T13:53:30.525Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:32.592224Z", + "id": "CVE-2026-61467", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-61467" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:31.838Z" + "dateUpdated": "2026-11-13T13:53:30.525Z" } } ] diff --git a/data/2026/61xxx/CVE-2026-61473.json b/data/2026/61xxx/CVE-2026-61473.json index e01bf91a37..4ef14e28f0 100644 --- a/data/2026/61xxx/CVE-2026-61473.json +++ b/data/2026/61xxx/CVE-2026-61473.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-14T22:12:36.518Z", "datePublished": "2026-11-10T17:48:02.255Z", - "dateUpdated": "2026-11-13T04:59:34.060Z" + "dateUpdated": "2026-11-13T13:53:15.524Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:34.831993Z", + "id": "CVE-2026-61473", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-61473" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:34.060Z" + "dateUpdated": "2026-11-13T13:53:15.524Z" } } ] diff --git a/data/2026/61xxx/CVE-2026-61812.json b/data/2026/61xxx/CVE-2026-61812.json index 1b80e41bb1..cce961d261 100644 --- a/data/2026/61xxx/CVE-2026-61812.json +++ b/data/2026/61xxx/CVE-2026-61812.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-07-10T20:17:57.991Z", "datePublished": "2026-11-09T21:37:05.788Z", - "dateUpdated": "2026-11-09T21:37:05.788Z" + "dateUpdated": "2026-11-13T13:21:01.405Z" }, "containers": { "cna": { @@ -124,6 +124,40 @@ "advisory": "GHSA-cxqf-vgrr-xxrv", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:20:47.963570Z", + "id": "CVE-2026-61812", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:21:01.405Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/61xxx/CVE-2026-61887.json b/data/2026/61xxx/CVE-2026-61887.json index b8ad09473f..0d31e8c0b6 100644 --- a/data/2026/61xxx/CVE-2026-61887.json +++ b/data/2026/61xxx/CVE-2026-61887.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-14T22:09:54.089Z", "datePublished": "2026-11-10T17:48:06.439Z", - "dateUpdated": "2026-11-13T04:59:39.849Z" + "dateUpdated": "2026-11-13T13:53:01.063Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:40.630401Z", + "id": "CVE-2026-61887", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-61887" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:39.849Z" + "dateUpdated": "2026-11-13T13:53:01.063Z" } } ] diff --git a/data/2026/62xxx/CVE-2026-62275.json b/data/2026/62xxx/CVE-2026-62275.json index ffa79d587b..42a0861474 100644 --- a/data/2026/62xxx/CVE-2026-62275.json +++ b/data/2026/62xxx/CVE-2026-62275.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-15T03:00:03.708Z", "datePublished": "2026-11-10T17:48:10.617Z", - "dateUpdated": "2026-11-13T04:59:44.343Z" + "dateUpdated": "2026-11-13T13:52:46.072Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:45.346727Z", + "id": "CVE-2026-62275", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-62275" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:44.343Z" + "dateUpdated": "2026-11-13T13:52:46.072Z" } } ] diff --git a/data/2026/62xxx/CVE-2026-62929.json b/data/2026/62xxx/CVE-2026-62929.json index 120e491e23..a4cbe9d0ee 100644 --- a/data/2026/62xxx/CVE-2026-62929.json +++ b/data/2026/62xxx/CVE-2026-62929.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-07-15T03:00:03.711Z", "datePublished": "2026-11-10T17:48:19.147Z", - "dateUpdated": "2026-11-13T04:59:49.066Z" + "dateUpdated": "2026-11-13T13:52:31.051Z" }, "containers": { "cna": { @@ -89,13 +89,13 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", "metrics": [ { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T04:59:49.819167Z", + "id": "CVE-2026-62929", "options": [ { "Exploitation": "none" @@ -108,16 +108,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-62929" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T04:59:49.066Z" + "dateUpdated": "2026-11-13T13:52:31.051Z" } } ] diff --git a/data/2026/77xxx/CVE-2026-77685.json b/data/2026/77xxx/CVE-2026-77685.json index 67f2fde062..f69e917970 100644 --- a/data/2026/77xxx/CVE-2026-77685.json +++ b/data/2026/77xxx/CVE-2026-77685.json @@ -8,7 +8,7 @@ "assignerShortName": "zephyr", "dateReserved": "2026-08-21T05:45:00.814Z", "datePublished": "2026-11-10T22:07:41.411Z", - "dateUpdated": "2026-11-10T22:07:41.411Z" + "dateUpdated": "2026-11-13T13:38:58.940Z" }, "containers": { "cna": { @@ -114,6 +114,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:37:27.178564Z", + "id": "CVE-2026-77685", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:38:58.940Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/77xxx/CVE-2026-77706.json b/data/2026/77xxx/CVE-2026-77706.json new file mode 100644 index 0000000000..3876ba2620 --- /dev/null +++ b/data/2026/77xxx/CVE-2026-77706.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-77706", + "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", + "state": "PUBLISHED", + "assignerShortName": "TR-CERT", + "dateReserved": "2026-08-21T08:13:50.477Z", + "datePublished": "2026-11-13T14:05:57.591Z", + "dateUpdated": "2026-11-13T14:05:57.591Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", + "shortName": "TR-CERT", + "dateUpdated": "2026-11-13T14:05:57.591Z" + }, + "title": "Denial of Service via Maliciously Compressed Spreadsheet File in Fileorbis's FileOrbis NextGen FileServer", + "datePublic": "2026-11-13T14:01:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-409", + "description": "CWE-409 Improper handling of highly compressed data (data amplification)", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-227", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-227 Sustained Client Engagement" + } + ] + } + ], + "affected": [ + { + "vendor": "Fileorbis Bilişim Hizmetleri Ticaret Anonim Şirketi", + "product": "FileOrbis NextGen FileServer", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "12.7", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper handling of highly compressed data (data amplification) vulnerability in Fileorbis Bilişim Hizmetleri Ticaret Anonim Şirketi FileOrbis NextGen FileServer allows Sustained Client Engagement.\n\nThis issue affects FileOrbis NextGen FileServer: before 12.7.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper handling of highly compressed data (data amplification) vulnerability in Fileorbis Bilişim Hizmetleri Ticaret Anonim Şirketi FileOrbis NextGen FileServer allows Sustained Client Engagement.

This issue affects FileOrbis NextGen FileServer: before 12.7.

" + } + ] + } + ], + "references": [ + { + "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1540", + "tags": [ + "government-resource" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Osman Can Vural", + "type": "finder" + } + ], + "source": { + "defect": [ + "TR-26-1540" + ], + "advisory": "TR-26-1540", + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/82xxx/CVE-2026-82177.json b/data/2026/82xxx/CVE-2026-82177.json new file mode 100644 index 0000000000..d2d6ae2c7d --- /dev/null +++ b/data/2026/82xxx/CVE-2026-82177.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-82177", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-08-28T07:04:31.457Z", + "datePublished": "2026-11-13T14:13:13.256Z", + "dateUpdated": "2026-11-13T14:13:13.256Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T14:13:13.256Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-78", + "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains an OS Command Injection vulnerability. A high-privileged attacker could exploit this vulnerability, potentially leading to arbitrary root command execution on the appliance.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains an OS Command Injection vulnerability. A high-privileged attacker could exploit this vulnerability, potentially leading to arbitrary root command execution on the appliance." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 7.2, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/82xxx/CVE-2026-82179.json b/data/2026/82xxx/CVE-2026-82179.json new file mode 100644 index 0000000000..6ed093bbbc --- /dev/null +++ b/data/2026/82xxx/CVE-2026-82179.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-82179", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-08-28T07:04:31.458Z", + "datePublished": "2026-11-13T13:47:35.238Z", + "dateUpdated": "2026-11-13T13:47:35.238Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T13:47:35.238Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-915", + "description": "CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains an authorization bypass vulnerability. An authenticated administrator could exploit this vulnerability to bypass multi-approver controls on critical operations.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains an authorization bypass vulnerability. An authenticated administrator could exploit this vulnerability to bypass multi-approver controls on critical operations." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/82xxx/CVE-2026-82391.json b/data/2026/82xxx/CVE-2026-82391.json index 811c94dd06..2c7be3f2c1 100644 --- a/data/2026/82xxx/CVE-2026-82391.json +++ b/data/2026/82xxx/CVE-2026-82391.json @@ -8,7 +8,7 @@ "assignerShortName": "zephyr", "dateReserved": "2026-08-28T21:11:46.166Z", "datePublished": "2026-11-10T22:07:39.047Z", - "dateUpdated": "2026-11-10T22:07:39.047Z" + "dateUpdated": "2026-11-13T13:36:09.236Z" }, "containers": { "cna": { @@ -94,6 +94,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:35:55.858780Z", + "id": "CVE-2026-82391", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:36:09.236Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/86xxx/CVE-2026-86353.json b/data/2026/86xxx/CVE-2026-86353.json new file mode 100644 index 0000000000..122d9898da --- /dev/null +++ b/data/2026/86xxx/CVE-2026-86353.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-86353", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-09-07T10:04:28.180Z", + "datePublished": "2026-11-13T13:15:43.356Z", + "dateUpdated": "2026-11-13T13:15:43.356Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T13:15:43.356Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-327", + "description": "CWE-327: Use of a Broken or Risky Cryptographic Algorithm", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker with existing privileged access to the appliance to recover stored credentials.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker with existing privileged access to the appliance to recover stored credentials." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/87xxx/CVE-2026-87042.json b/data/2026/87xxx/CVE-2026-87042.json index 6fa6cc48f7..bf4b2f0c36 100644 --- a/data/2026/87xxx/CVE-2026-87042.json +++ b/data/2026/87xxx/CVE-2026-87042.json @@ -8,7 +8,7 @@ "assignerShortName": "zephyr", "dateReserved": "2026-09-08T18:40:46.092Z", "datePublished": "2026-11-10T22:07:40.237Z", - "dateUpdated": "2026-11-10T22:07:40.237Z" + "dateUpdated": "2026-11-13T13:39:36.931Z" }, "containers": { "cna": { @@ -107,6 +107,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:39:24.454742Z", + "id": "CVE-2026-87042", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:39:36.931Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88833.json b/data/2026/88xxx/CVE-2026-88833.json index 739da916c4..020b47fa63 100644 --- a/data/2026/88xxx/CVE-2026-88833.json +++ b/data/2026/88xxx/CVE-2026-88833.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-10T09:42:04.559Z", "datePublished": "2026-10-13T16:56:11.068Z", - "dateUpdated": "2026-11-09T13:06:14.048Z" + "dateUpdated": "2026-11-13T13:32:56.894Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "busybox-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.37.0-9.5.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -57,19 +75,17 @@ "cpes": [ "cpe:/o:redhat:rhel_els:6" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "busybox", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:99577", + "name": "RHSA-2026:99577", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-88833", "tags": [ @@ -127,7 +143,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-09T13:06:14.048Z" + "dateUpdated": "2026-11-13T13:32:56.894Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/90xxx/CVE-2026-90832.json b/data/2026/90xxx/CVE-2026-90832.json index 1a56dded26..da012a96c5 100644 --- a/data/2026/90xxx/CVE-2026-90832.json +++ b/data/2026/90xxx/CVE-2026-90832.json @@ -8,7 +8,7 @@ "assignerShortName": "zephyr", "dateReserved": "2026-09-13T19:22:56.728Z", "datePublished": "2026-11-10T22:07:37.866Z", - "dateUpdated": "2026-11-10T22:07:37.866Z" + "dateUpdated": "2026-11-13T13:35:26.257Z" }, "containers": { "cna": { @@ -97,6 +97,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:35:14.974838Z", + "id": "CVE-2026-90832", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:35:26.257Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/90xxx/CVE-2026-90833.json b/data/2026/90xxx/CVE-2026-90833.json index 916268f9f8..fbc76bf417 100644 --- a/data/2026/90xxx/CVE-2026-90833.json +++ b/data/2026/90xxx/CVE-2026-90833.json @@ -8,7 +8,7 @@ "assignerShortName": "zephyr", "dateReserved": "2026-09-13T19:22:58.656Z", "datePublished": "2026-11-10T22:07:42.603Z", - "dateUpdated": "2026-11-10T22:07:42.603Z" + "dateUpdated": "2026-11-13T13:36:52.612Z" }, "containers": { "cna": { @@ -106,6 +106,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:36:31.771160Z", + "id": "CVE-2026-90833", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:36:52.612Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/90xxx/CVE-2026-90834.json b/data/2026/90xxx/CVE-2026-90834.json index ed6034951a..22bf61e6fe 100644 --- a/data/2026/90xxx/CVE-2026-90834.json +++ b/data/2026/90xxx/CVE-2026-90834.json @@ -8,7 +8,7 @@ "assignerShortName": "zephyr", "dateReserved": "2026-09-13T19:23:00.663Z", "datePublished": "2026-11-10T22:07:45.167Z", - "dateUpdated": "2026-11-10T22:07:45.167Z" + "dateUpdated": "2026-11-13T13:34:49.079Z" }, "containers": { "cna": { @@ -100,6 +100,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:34:36.820599Z", + "id": "CVE-2026-90834", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:34:49.079Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/91xxx/CVE-2026-91094.json b/data/2026/91xxx/CVE-2026-91094.json new file mode 100644 index 0000000000..3a5e25c20b --- /dev/null +++ b/data/2026/91xxx/CVE-2026-91094.json @@ -0,0 +1,77 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-91094", + "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", + "state": "PUBLISHED", + "assignerShortName": "debian", + "dateReserved": "2026-09-14T18:35:52.245Z", + "datePublished": "2026-11-13T14:01:22.128Z", + "dateUpdated": "2026-11-13T14:14:35.366Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", + "shortName": "debian", + "dateUpdated": "2026-11-13T14:14:35.366Z" + }, + "affected": [ + { + "vendor": "Debian", + "product": "dpkg", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.23.12", + "versionType": "semver" + } + ], + "defaultStatus": "affected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A directory traversal bug was discovered when unpacking 3.0 (quilt) source packages, where the packaging tarball could contain the quilt database directory (.pc) with attacker controlled symlinks, where that in combination with patches that would fail to apply, could be used to make the code used to restore the backup files to either modify or remove the files pointed to by the attacker controlled symlinks.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

A directory traversal bug was discovered when unpacking 3.0 (quilt) source packages, where the packaging tarball could contain the quilt database directory (.pc) with attacker controlled symlinks, where that in combination with patches that would fail to apply, could be used to make the code used to restore the backup files to either modify or remove the files pointed to by the attacker controlled symlinks.

" + } + ] + } + ], + "references": [ + { + "url": "https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=50fb8e7fe20cee0d5b14000c32ca8c31f3bf0574", + "tags": [ + "patch" + ] + }, + { + "url": "https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=2a31760bc2a968878700476c1de5b8ea7809e460", + "tags": [ + "patch" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Thai Duong", + "type": "reporter" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/92xxx/CVE-2026-92241.json b/data/2026/92xxx/CVE-2026-92241.json new file mode 100644 index 0000000000..fa694ad666 --- /dev/null +++ b/data/2026/92xxx/CVE-2026-92241.json @@ -0,0 +1,93 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-92241", + "assignerOrgId": "e2e69745-5e70-4e92-8431-deb5529a81ad", + "state": "PUBLISHED", + "assignerShortName": "zephyr", + "dateReserved": "2026-09-15T19:52:34.955Z", + "datePublished": "2026-11-13T14:03:47.349Z", + "dateUpdated": "2026-11-13T14:03:47.349Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "e2e69745-5e70-4e92-8431-deb5529a81ad", + "shortName": "zephyr", + "dateUpdated": "2026-11-13T14:03:47.349Z" + }, + "title": "Bluetooth Classic AVRCP browsing channel can deadlock the Bluetooth receive thread, hanging the host", + "descriptions": [ + { + "lang": "en", + "value": "The AVRCP browsing channel's L2CAP receive-buffer callback, browsing_avrcp_l2cap_alloc_buf() in subsys/bluetooth/host/classic/avrcp.c, allocated from the shared avctp_browsing_rx_pool with K_FOREVER. L2CAP invokes that callback from the Bluetooth RX work queue thread (bt_workq, \"BT RX WQ\"), both for the head buffer of a new SDU and — through l2cap_br_alloc_frag() and net_buf_append_bytes() — for every further fragment of a reassembled SDU. That same thread is the only context that ever releases these buffers, after bt_l2cap_br_recv_seg() delivers a completed SDU and calls net_buf_unref(), so a wait taken there can never be satisfied.\n\nThe pool holds CONFIG_BT_MAX_CONN + 1 buffers of CONFIG_BT_AVRCP_BROWSING_L2CAP_MTU bytes (two buffers of 339 bytes in the default configuration). A connected browsing peer can drain it because bt_l2cap_br_recv_seg() in subsys/bluetooth/host/classic/l2cap_br.c accepts the SDU length declared in an SAR_START segment without bounding it by br_chan->rx.mtu: a peer that announces a large SDU and then streams continuation segments forces one pool buffer per segment-worth of data. Once the pool is empty the next allocation blocks forever inside the callback.\n\nTriggering the flaw requires a build with CONFIG_BT_CLASSIC and the experimental CONFIG_BT_AVRCP_BROWSING option, an application that registers AVRCP callbacks, and a BR/EDR peer that has established the AVRCP control channel and then the browsing channel, which requires an encrypted (paired) link. No malformed packet is needed — a few hundred bytes of ordinary segmented L2CAP traffic suffice.\n\nThe consequence is a permanent hang of the whole Bluetooth host, not just of AVRCP: the blocked thread drains bt_dev.rx_queue for all HCI ACL data and low-priority events and also runs the host's internal work items, so all connections stop being serviced and the state is unrecoverable without a reboot. There is no memory-corruption or information-disclosure component. The fix allocates with K_NO_WAIT, so an empty pool now yields a local-busy indication or a channel disconnect that the application can recover from." + } + ], + "affected": [ + { + "vendor": "zephyrproject", + "product": "zephyr", + "collectionURL": "https://github.com/zephyrproject-rtos/zephyr", + "packageName": "zephyr", + "defaultStatus": "unaffected", + "programFiles": [ + "subsys/bluetooth/host/classic/avrcp.c" + ], + "programRoutines": [ + { + "name": "browsing_avrcp_l2cap_alloc_buf" + } + ], + "versions": [ + { + "version": "4.4.0", + "status": "affected", + "versionType": "semver", + "lessThan": "4.5.0" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/zephyrproject-rtos/zephyr/commit/c8c2438f05165397347613b44dd8e9eaa1243139", + "name": "Fix commit", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8vpg-4235-9qjj", + "name": "GHSA-8vpg-4235-9qjj" + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.7, + "baseSeverity": "MEDIUM" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "dos", + "cweId": "CWE-833", + "type": "CWE" + } + ] + } + ], + "x_generator": { + "engine": "cvelib 1.8.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/92xxx/CVE-2026-92443.json b/data/2026/92xxx/CVE-2026-92443.json index 43dc5f805f..b12560eae2 100644 --- a/data/2026/92xxx/CVE-2026-92443.json +++ b/data/2026/92xxx/CVE-2026-92443.json @@ -8,7 +8,7 @@ "assignerShortName": "Kong", "dateReserved": "2026-09-16T10:24:57.218Z", "datePublished": "2026-11-10T21:31:03.318Z", - "dateUpdated": "2026-11-10T21:31:03.318Z" + "dateUpdated": "2026-11-13T13:40:15.813Z" }, "containers": { "cna": { @@ -168,6 +168,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:40:03.972145Z", + "id": "CVE-2026-92443", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:40:15.813Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/92xxx/CVE-2026-92558.json b/data/2026/92xxx/CVE-2026-92558.json index 108232a90f..fe827b95a8 100644 --- a/data/2026/92xxx/CVE-2026-92558.json +++ b/data/2026/92xxx/CVE-2026-92558.json @@ -8,7 +8,7 @@ "assignerShortName": "Kong", "dateReserved": "2026-09-16T13:20:37.821Z", "datePublished": "2026-11-10T21:45:39.935Z", - "dateUpdated": "2026-11-10T21:45:39.935Z" + "dateUpdated": "2026-11-13T13:40:50.464Z" }, "containers": { "cna": { @@ -168,6 +168,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:40:40.194258Z", + "id": "CVE-2026-92558", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:40:50.464Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/92xxx/CVE-2026-92735.json b/data/2026/92xxx/CVE-2026-92735.json index 2f706d2c00..732cdcbcc8 100644 --- a/data/2026/92xxx/CVE-2026-92735.json +++ b/data/2026/92xxx/CVE-2026-92735.json @@ -8,7 +8,7 @@ "assignerShortName": "HashiCorp", "dateReserved": "2026-09-16T18:24:56.213Z", "datePublished": "2026-11-12T22:31:44.506Z", - "dateUpdated": "2026-11-12T22:31:44.506Z" + "dateUpdated": "2026-11-13T13:48:31.203Z" }, "containers": { "cna": { @@ -57,9 +57,17 @@ "at": "1.19.25", "status": "unaffected" }, + { + "at": "1.20.0", + "status": "affected" + }, { "at": "1.21.14", "status": "unaffected" + }, + { + "at": "2.0.0", + "status": "affected" } ], "lessThan": "2.2.2", @@ -132,7 +140,7 @@ "providerMetadata": { "orgId": "67fedba0-ff2e-4543-ba5b-aa93e87718cc", "shortName": "HashiCorp", - "dateUpdated": "2026-11-12T22:31:44.506Z" + "dateUpdated": "2026-11-13T13:48:31.203Z" }, "references": [ { diff --git a/data/2026/92xxx/CVE-2026-92822.json b/data/2026/92xxx/CVE-2026-92822.json index ee971e0526..79977e77db 100644 --- a/data/2026/92xxx/CVE-2026-92822.json +++ b/data/2026/92xxx/CVE-2026-92822.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-16T20:30:35.109Z", "datePublished": "2026-10-21T03:18:37.973Z", - "dateUpdated": "2026-11-06T07:46:00.114Z" + "dateUpdated": "2026-11-13T13:30:47.771Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "libmodulemd-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "2.15.4-1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -78,16 +96,6 @@ "cpe:/a:redhat:enterprise_linux:9" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "libmodulemd", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", @@ -440,6 +448,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:95982", + "name": "RHSA-2026:95982", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-92822", "tags": [ @@ -503,7 +519,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T07:46:00.114Z" + "dateUpdated": "2026-11-13T13:30:47.771Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/92xxx/CVE-2026-92823.json b/data/2026/92xxx/CVE-2026-92823.json index 97b32711c2..01ef300878 100644 --- a/data/2026/92xxx/CVE-2026-92823.json +++ b/data/2026/92xxx/CVE-2026-92823.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-16T20:31:04.648Z", "datePublished": "2026-10-21T03:18:37.968Z", - "dateUpdated": "2026-11-06T07:46:01.030Z" + "dateUpdated": "2026-11-13T13:30:48.655Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "libmodulemd-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "2.15.4-1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -78,16 +96,6 @@ "cpe:/a:redhat:enterprise_linux:9" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "libmodulemd", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", @@ -440,6 +448,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:95982", + "name": "RHSA-2026:95982", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-92823", "tags": [ @@ -503,7 +519,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T07:46:01.030Z" + "dateUpdated": "2026-11-13T13:30:48.655Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/92xxx/CVE-2026-92824.json b/data/2026/92xxx/CVE-2026-92824.json index f6cc56a625..d418a33d4d 100644 --- a/data/2026/92xxx/CVE-2026-92824.json +++ b/data/2026/92xxx/CVE-2026-92824.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-16T20:31:32.419Z", "datePublished": "2026-10-21T03:18:41.962Z", - "dateUpdated": "2026-11-06T07:46:04.676Z" + "dateUpdated": "2026-11-13T13:30:50.763Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "libmodulemd-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "2.15.4-1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -78,16 +96,6 @@ "cpe:/a:redhat:enterprise_linux:9" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "libmodulemd", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", @@ -440,6 +448,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:95982", + "name": "RHSA-2026:95982", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-92824", "tags": [ @@ -503,7 +519,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T07:46:04.676Z" + "dateUpdated": "2026-11-13T13:30:50.763Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/93xxx/CVE-2026-93017.json b/data/2026/93xxx/CVE-2026-93017.json index 31efb7dd64..0466db09f2 100644 --- a/data/2026/93xxx/CVE-2026-93017.json +++ b/data/2026/93xxx/CVE-2026-93017.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-17T14:51:36.301Z", "datePublished": "2026-10-08T14:31:58.671Z", - "dateUpdated": "2026-10-30T04:25:45.426Z" + "dateUpdated": "2026-11-13T13:14:34.913Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/a:redhat:openshift:4.12::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.13", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "openshift4/ose-insights-rhel8-operator", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793825599", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.13::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.14", @@ -120,6 +138,24 @@ "cpe:/a:redhat:openshift:4.16::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.17", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "openshift4/ose-insights-rhel9-operator", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793904247", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.17::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.18", @@ -294,6 +330,22 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:95746", + "name": "RHSA-2026:95746", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96283", + "name": "RHSA-2026:96283", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-93017", "tags": [ @@ -345,7 +397,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-10-30T04:25:45.426Z" + "dateUpdated": "2026-11-13T13:14:34.913Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/93xxx/CVE-2026-93333.json b/data/2026/93xxx/CVE-2026-93333.json index 9e954d8536..8c8de66103 100644 --- a/data/2026/93xxx/CVE-2026-93333.json +++ b/data/2026/93xxx/CVE-2026-93333.json @@ -8,7 +8,7 @@ "assignerShortName": "HashiCorp", "dateReserved": "2026-09-17T17:49:53.979Z", "datePublished": "2026-11-12T22:32:43.853Z", - "dateUpdated": "2026-11-12T22:32:43.853Z" + "dateUpdated": "2026-11-13T13:50:04.990Z" }, "containers": { "cna": { @@ -57,9 +57,17 @@ "at": "1.19.25", "status": "unaffected" }, + { + "at": "1.20.0", + "status": "affected" + }, { "at": "1.21.14", "status": "unaffected" + }, + { + "at": "2.0.0", + "status": "affected" } ], "lessThan": "2.2.2", @@ -132,7 +140,7 @@ "providerMetadata": { "orgId": "67fedba0-ff2e-4543-ba5b-aa93e87718cc", "shortName": "HashiCorp", - "dateUpdated": "2026-11-12T22:32:43.853Z" + "dateUpdated": "2026-11-13T13:50:04.990Z" }, "references": [ { diff --git a/data/2026/93xxx/CVE-2026-93335.json b/data/2026/93xxx/CVE-2026-93335.json index 7f7a59c4f4..dca5418542 100644 --- a/data/2026/93xxx/CVE-2026-93335.json +++ b/data/2026/93xxx/CVE-2026-93335.json @@ -8,7 +8,7 @@ "assignerShortName": "HashiCorp", "dateReserved": "2026-09-17T17:54:44.624Z", "datePublished": "2026-11-12T22:32:14.454Z", - "dateUpdated": "2026-11-12T22:32:14.454Z" + "dateUpdated": "2026-11-13T13:49:26.001Z" }, "containers": { "cna": { @@ -57,9 +57,17 @@ "at": "1.19.25", "status": "unaffected" }, + { + "at": "1.20.0", + "status": "affected" + }, { "at": "1.21.14", "status": "unaffected" + }, + { + "at": "2.0.0", + "status": "affected" } ], "lessThan": "2.2.2", @@ -132,7 +140,7 @@ "providerMetadata": { "orgId": "67fedba0-ff2e-4543-ba5b-aa93e87718cc", "shortName": "HashiCorp", - "dateUpdated": "2026-11-12T22:32:14.454Z" + "dateUpdated": "2026-11-13T13:49:26.001Z" }, "references": [ { diff --git a/data/2026/95xxx/CVE-2026-95518.json b/data/2026/95xxx/CVE-2026-95518.json index 23cd478a81..63ca55a1a0 100644 --- a/data/2026/95xxx/CVE-2026-95518.json +++ b/data/2026/95xxx/CVE-2026-95518.json @@ -8,14 +8,14 @@ "assignerShortName": "TR-CERT", "dateReserved": "2026-09-22T08:35:44.823Z", "datePublished": "2026-11-13T12:54:44.462Z", - "dateUpdated": "2026-11-13T12:54:44.462Z" + "dateUpdated": "2026-11-13T13:39:55.013Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", - "dateUpdated": "2026-11-13T12:54:44.462Z" + "dateUpdated": "2026-11-13T13:39:55.013Z" }, "title": "TOCTOU Race Condition in TÜBİTAK BİLGEM's Pardus Package Installer", "datePublic": "2026-11-13T12:49:00.000Z", @@ -108,6 +108,11 @@ "lang": "en", "value": "Özcan Ersan", "type": "finder" + }, + { + "lang": "en", + "value": "Serdar ÇATAL", + "type": "finder" } ], "source": { diff --git a/data/2026/95xxx/CVE-2026-95520.json b/data/2026/95xxx/CVE-2026-95520.json index 566283f374..e71a2e347c 100644 --- a/data/2026/95xxx/CVE-2026-95520.json +++ b/data/2026/95xxx/CVE-2026-95520.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-22T08:44:44.967Z", "datePublished": "2026-09-29T11:02:06.457Z", - "dateUpdated": "2026-11-06T07:38:05.396Z" + "dateUpdated": "2026-11-13T13:33:52.132Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rpm-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "6.1.0-1.4.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -98,16 +116,6 @@ "cpe:/a:redhat:enterprise_linux:9" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rpm", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", @@ -430,6 +438,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:98095", + "name": "RHSA-2026:98095", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-95520", "tags": [ @@ -487,7 +503,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T07:38:05.396Z" + "dateUpdated": "2026-11-13T13:33:52.132Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/delta.json b/data/delta.json index 08a9d436da..780742cdb6 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,128 +1,146 @@ { - "fetchTime": "2026-11-13T13:13:46.303Z", - "numberOfChanges": 20, + "fetchTime": "2026-11-13T14:14:46.205Z", + "numberOfChanges": 23, "new": [ { - "cveId": "CVE-2026-105880", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105880", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105880.json", - "dateUpdated": "2026-11-13T13:04:40.595Z" + "cveId": "CVE-2026-116411", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116411", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116411.json", + "dateUpdated": "2026-11-13T14:03:41.940Z" }, { - "cveId": "CVE-2026-107525", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107525", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107525.json", - "dateUpdated": "2026-11-13T13:08:18.837Z" + "cveId": "CVE-2026-128790", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128790", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128790.json", + "dateUpdated": "2026-11-13T14:12:17.843Z" }, { - "cveId": "CVE-2026-112830", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112830", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112830.json", - "dateUpdated": "2026-11-13T13:05:15.375Z" + "cveId": "CVE-2026-77706", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-77706", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/77xxx/CVE-2026-77706.json", + "dateUpdated": "2026-11-13T14:05:57.591Z" }, { - "cveId": "CVE-2026-119518", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119518", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119518.json", - "dateUpdated": "2026-11-13T13:04:21.225Z" + "cveId": "CVE-2026-82177", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82177", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82177.json", + "dateUpdated": "2026-11-13T14:13:13.256Z" }, { - "cveId": "CVE-2026-125801", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125801", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125801.json", - "dateUpdated": "2026-11-13T13:05:33.407Z" - }, - { - "cveId": "CVE-2026-125816", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125816", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125816.json", - "dateUpdated": "2026-11-13T13:04:43.817Z" + "cveId": "CVE-2026-92241", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92241", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92241.json", + "dateUpdated": "2026-11-13T14:03:47.349Z" } ], "updated": [ { - "cveId": "CVE-2025-13327", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-13327", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/13xxx/CVE-2025-13327.json", - "dateUpdated": "2026-11-13T13:03:37.676Z" + "cveId": "CVE-2026-112318", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112318", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112318.json", + "dateUpdated": "2026-11-13T14:10:28.200Z" }, { - "cveId": "CVE-2026-114690", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114690", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114690.json", - "dateUpdated": "2026-11-13T13:07:49.006Z" + "cveId": "CVE-2026-123811", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123811", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123811.json", + "dateUpdated": "2026-11-13T14:13:56.947Z" }, { - "cveId": "CVE-2026-114691", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114691", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114691.json", - "dateUpdated": "2026-11-13T13:07:50.251Z" + "cveId": "CVE-2026-125214", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125214", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125214.json", + "dateUpdated": "2026-11-13T14:12:48.298Z" }, { - "cveId": "CVE-2026-122056", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122056", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122056.json", - "dateUpdated": "2026-11-13T13:11:15.067Z" + "cveId": "CVE-2026-126213", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126213", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126213.json", + "dateUpdated": "2026-11-13T14:08:31.246Z" }, { - "cveId": "CVE-2026-123806", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123806", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123806.json", - "dateUpdated": "2026-11-13T13:09:54.700Z" + "cveId": "CVE-2026-56938", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56938", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56938.json", + "dateUpdated": "2026-11-13T14:06:27.924Z" }, { - "cveId": "CVE-2026-124987", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124987", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124987.json", - "dateUpdated": "2026-11-13T13:08:28.986Z" + "cveId": "CVE-2026-56944", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56944", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56944.json", + "dateUpdated": "2026-11-13T14:08:07.470Z" }, { - "cveId": "CVE-2026-125250", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125250", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125250.json", - "dateUpdated": "2026-11-13T13:03:18.783Z" + "cveId": "CVE-2026-56969", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56969", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56969.json", + "dateUpdated": "2026-11-13T14:05:36.154Z" }, { - "cveId": "CVE-2026-125262", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125262", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125262.json", - "dateUpdated": "2026-11-13T13:04:17.272Z" + "cveId": "CVE-2026-57010", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57010", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57010.json", + "dateUpdated": "2026-11-13T14:12:16.289Z" }, { - "cveId": "CVE-2026-125266", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125266", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125266.json", - "dateUpdated": "2026-11-13T13:05:41.464Z" + "cveId": "CVE-2026-57048", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57048", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57048.json", + "dateUpdated": "2026-11-13T14:11:31.845Z" }, { - "cveId": "CVE-2026-125270", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125270", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125270.json", - "dateUpdated": "2026-11-13T13:06:56.300Z" + "cveId": "CVE-2026-58680", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58680", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58680.json", + "dateUpdated": "2026-11-13T14:11:06.752Z" }, { - "cveId": "CVE-2026-49329", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-49329", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/49xxx/CVE-2026-49329.json", - "dateUpdated": "2026-11-13T13:13:15.481Z" + "cveId": "CVE-2026-58736", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58736", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58736.json", + "dateUpdated": "2026-11-13T14:07:37.403Z" }, { - "cveId": "CVE-2026-63497", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63497", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63497.json", - "dateUpdated": "2026-11-13T13:13:15.881Z" + "cveId": "CVE-2026-58780", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58780", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58780.json", + "dateUpdated": "2026-11-13T14:10:19.874Z" }, { - "cveId": "CVE-2026-75888", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75888", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75888.json", - "dateUpdated": "2026-11-13T13:13:24.487Z" + "cveId": "CVE-2026-58787", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58787", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58787.json", + "dateUpdated": "2026-11-13T14:09:44.710Z" }, { - "cveId": "CVE-2026-83589", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83589", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83589.json", - "dateUpdated": "2026-11-13T13:13:31.185Z" + "cveId": "CVE-2026-58798", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58798", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58798.json", + "dateUpdated": "2026-11-13T14:08:57.207Z" + }, + { + "cveId": "CVE-2026-58800", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58800", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58800.json", + "dateUpdated": "2026-11-13T14:04:41.074Z" + }, + { + "cveId": "CVE-2026-59598", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59598", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59598.json", + "dateUpdated": "2026-11-13T14:02:54.173Z" + }, + { + "cveId": "CVE-2026-59609", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59609", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59609.json", + "dateUpdated": "2026-11-13T14:02:08.579Z" + }, + { + "cveId": "CVE-2026-91094", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91094", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91094.json", + "dateUpdated": "2026-11-13T14:14:35.366Z" } ], "error": [] diff --git a/data/deltaLog.json b/data/deltaLog.json index 491a3d23cf..1d500e8e5e 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,738 @@ [ + { + "fetchTime": "2026-11-13T14:14:46.205Z", + "numberOfChanges": 23, + "new": [ + { + "cveId": "CVE-2026-116411", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116411", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116411.json", + "dateUpdated": "2026-11-13T14:03:41.940Z" + }, + { + "cveId": "CVE-2026-128790", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128790", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128790.json", + "dateUpdated": "2026-11-13T14:12:17.843Z" + }, + { + "cveId": "CVE-2026-77706", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-77706", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/77xxx/CVE-2026-77706.json", + "dateUpdated": "2026-11-13T14:05:57.591Z" + }, + { + "cveId": "CVE-2026-82177", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82177", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82177.json", + "dateUpdated": "2026-11-13T14:13:13.256Z" + }, + { + "cveId": "CVE-2026-92241", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92241", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92241.json", + "dateUpdated": "2026-11-13T14:03:47.349Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-112318", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112318", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112318.json", + "dateUpdated": "2026-11-13T14:10:28.200Z" + }, + { + "cveId": "CVE-2026-123811", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123811", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123811.json", + "dateUpdated": "2026-11-13T14:13:56.947Z" + }, + { + "cveId": "CVE-2026-125214", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125214", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125214.json", + "dateUpdated": "2026-11-13T14:12:48.298Z" + }, + { + "cveId": "CVE-2026-126213", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126213", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126213.json", + "dateUpdated": "2026-11-13T14:08:31.246Z" + }, + { + "cveId": "CVE-2026-56938", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56938", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56938.json", + "dateUpdated": "2026-11-13T14:06:27.924Z" + }, + { + "cveId": "CVE-2026-56944", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56944", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56944.json", + "dateUpdated": "2026-11-13T14:08:07.470Z" + }, + { + "cveId": "CVE-2026-56969", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56969", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56969.json", + "dateUpdated": "2026-11-13T14:05:36.154Z" + }, + { + "cveId": "CVE-2026-57010", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57010", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57010.json", + "dateUpdated": "2026-11-13T14:12:16.289Z" + }, + { + "cveId": "CVE-2026-57048", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57048", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57048.json", + "dateUpdated": "2026-11-13T14:11:31.845Z" + }, + { + "cveId": "CVE-2026-58680", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58680", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58680.json", + "dateUpdated": "2026-11-13T14:11:06.752Z" + }, + { + "cveId": "CVE-2026-58736", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58736", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58736.json", + "dateUpdated": "2026-11-13T14:07:37.403Z" + }, + { + "cveId": "CVE-2026-58780", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58780", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58780.json", + "dateUpdated": "2026-11-13T14:10:19.874Z" + }, + { + "cveId": "CVE-2026-58787", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58787", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58787.json", + "dateUpdated": "2026-11-13T14:09:44.710Z" + }, + { + "cveId": "CVE-2026-58798", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58798", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58798.json", + "dateUpdated": "2026-11-13T14:08:57.207Z" + }, + { + "cveId": "CVE-2026-58800", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58800", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58800.json", + "dateUpdated": "2026-11-13T14:04:41.074Z" + }, + { + "cveId": "CVE-2026-59598", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59598", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59598.json", + "dateUpdated": "2026-11-13T14:02:54.173Z" + }, + { + "cveId": "CVE-2026-59609", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59609", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59609.json", + "dateUpdated": "2026-11-13T14:02:08.579Z" + }, + { + "cveId": "CVE-2026-91094", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91094", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91094.json", + "dateUpdated": "2026-11-13T14:14:35.366Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T14:02:07.709Z", + "numberOfChanges": 8, + "new": [ + { + "cveId": "CVE-2026-91094", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91094", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91094.json", + "dateUpdated": "2026-11-13T14:02:05.315Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-0175", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-0175", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0175.json", + "dateUpdated": "2026-11-13T13:56:07.154Z" + }, + { + "cveId": "CVE-2026-125374", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125374", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125374.json", + "dateUpdated": "2026-11-13T13:58:37.512Z" + }, + { + "cveId": "CVE-2026-44685", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44685", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44685.json", + "dateUpdated": "2026-11-13T13:56:13.294Z" + }, + { + "cveId": "CVE-2026-50175", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-50175", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50175.json", + "dateUpdated": "2026-11-13T13:55:56.803Z" + }, + { + "cveId": "CVE-2026-56946", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56946", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56946.json", + "dateUpdated": "2026-11-13T14:01:29.731Z" + }, + { + "cveId": "CVE-2026-57043", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57043", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57043.json", + "dateUpdated": "2026-11-13T14:01:15.267Z" + }, + { + "cveId": "CVE-2026-58779", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58779", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58779.json", + "dateUpdated": "2026-11-13T14:01:00.229Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T13:55:51.278Z", + "numberOfChanges": 22, + "new": [ + { + "cveId": "CVE-2026-109095", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109095", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109095.json", + "dateUpdated": "2026-11-13T13:53:11.592Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-120977", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120977", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120977.json", + "dateUpdated": "2026-11-13T13:53:31.624Z" + }, + { + "cveId": "CVE-2026-121287", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121287", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121287.json", + "dateUpdated": "2026-11-13T13:53:02.249Z" + }, + { + "cveId": "CVE-2026-124854", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124854", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124854.json", + "dateUpdated": "2026-11-13T13:55:02.878Z" + }, + { + "cveId": "CVE-2026-124951", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124951", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124951.json", + "dateUpdated": "2026-11-13T13:54:28.354Z" + }, + { + "cveId": "CVE-2026-125370", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125370", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125370.json", + "dateUpdated": "2026-11-13T13:52:37.225Z" + }, + { + "cveId": "CVE-2026-126182", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126182", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126182.json", + "dateUpdated": "2026-11-13T13:52:15.927Z" + }, + { + "cveId": "CVE-2026-56432", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56432", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56432.json", + "dateUpdated": "2026-11-13T13:55:41.875Z" + }, + { + "cveId": "CVE-2026-56435", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56435", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56435.json", + "dateUpdated": "2026-11-13T13:55:27.371Z" + }, + { + "cveId": "CVE-2026-56759", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56759", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56759.json", + "dateUpdated": "2026-11-13T13:55:12.974Z" + }, + { + "cveId": "CVE-2026-57882", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57882", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57882.json", + "dateUpdated": "2026-11-13T13:54:58.417Z" + }, + { + "cveId": "CVE-2026-57891", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57891", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57891.json", + "dateUpdated": "2026-11-13T13:54:44.027Z" + }, + { + "cveId": "CVE-2026-57892", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57892", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57892.json", + "dateUpdated": "2026-11-13T13:54:29.498Z" + }, + { + "cveId": "CVE-2026-57893", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57893", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57893.json", + "dateUpdated": "2026-11-13T13:54:13.959Z" + }, + { + "cveId": "CVE-2026-60138", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60138", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60138.json", + "dateUpdated": "2026-11-13T13:53:59.493Z" + }, + { + "cveId": "CVE-2026-60142", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60142", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60142.json", + "dateUpdated": "2026-11-13T13:53:45.056Z" + }, + { + "cveId": "CVE-2026-61467", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61467", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61467.json", + "dateUpdated": "2026-11-13T13:53:30.525Z" + }, + { + "cveId": "CVE-2026-61473", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61473", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61473.json", + "dateUpdated": "2026-11-13T13:53:15.524Z" + }, + { + "cveId": "CVE-2026-61887", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61887", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61887.json", + "dateUpdated": "2026-11-13T13:53:01.063Z" + }, + { + "cveId": "CVE-2026-62275", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62275", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62275.json", + "dateUpdated": "2026-11-13T13:52:46.072Z" + }, + { + "cveId": "CVE-2026-62929", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62929", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62929.json", + "dateUpdated": "2026-11-13T13:52:31.051Z" + }, + { + "cveId": "CVE-2026-93333", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93333", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93333.json", + "dateUpdated": "2026-11-13T13:50:04.990Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T13:50:01.380Z", + "numberOfChanges": 5, + "new": [ + { + "cveId": "CVE-2026-82179", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82179", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82179.json", + "dateUpdated": "2026-11-13T13:47:35.238Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-125362", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125362", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125362.json", + "dateUpdated": "2026-11-13T13:46:40.769Z" + }, + { + "cveId": "CVE-2026-125366", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125366", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125366.json", + "dateUpdated": "2026-11-13T13:49:02.343Z" + }, + { + "cveId": "CVE-2026-92735", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92735", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92735.json", + "dateUpdated": "2026-11-13T13:48:31.203Z" + }, + { + "cveId": "CVE-2026-93335", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93335", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93335.json", + "dateUpdated": "2026-11-13T13:49:26.001Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T13:44:20.910Z", + "numberOfChanges": 10, + "new": [ + { + "cveId": "CVE-2026-116412", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116412", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116412.json", + "dateUpdated": "2026-11-13T13:38:40.528Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-115456", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115456", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115456.json", + "dateUpdated": "2026-11-13T13:43:03.628Z" + }, + { + "cveId": "CVE-2026-123041", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123041", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123041.json", + "dateUpdated": "2026-11-13T13:41:26.043Z" + }, + { + "cveId": "CVE-2026-125120", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125120", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125120.json", + "dateUpdated": "2026-11-13T13:40:53.316Z" + }, + { + "cveId": "CVE-2026-125358", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125358", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125358.json", + "dateUpdated": "2026-11-13T13:44:06.725Z" + }, + { + "cveId": "CVE-2026-77685", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-77685", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/77xxx/CVE-2026-77685.json", + "dateUpdated": "2026-11-13T13:38:58.940Z" + }, + { + "cveId": "CVE-2026-87042", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87042", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87042.json", + "dateUpdated": "2026-11-13T13:39:36.931Z" + }, + { + "cveId": "CVE-2026-92443", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92443", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92443.json", + "dateUpdated": "2026-11-13T13:40:15.813Z" + }, + { + "cveId": "CVE-2026-92558", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92558", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92558.json", + "dateUpdated": "2026-11-13T13:40:50.464Z" + }, + { + "cveId": "CVE-2026-95518", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95518", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95518.json", + "dateUpdated": "2026-11-13T13:39:55.013Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T13:38:40.447Z", + "numberOfChanges": 14, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-101295", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101295", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101295.json", + "dateUpdated": "2026-11-13T13:37:50.881Z" + }, + { + "cveId": "CVE-2026-103242", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103242", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103242.json", + "dateUpdated": "2026-11-13T13:33:52.458Z" + }, + { + "cveId": "CVE-2026-116645", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116645", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116645.json", + "dateUpdated": "2026-11-13T13:33:24.352Z" + }, + { + "cveId": "CVE-2026-118368", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118368", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118368.json", + "dateUpdated": "2026-11-13T13:32:30.714Z" + }, + { + "cveId": "CVE-2026-121885", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121885", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121885.json", + "dateUpdated": "2026-11-13T13:32:49.269Z" + }, + { + "cveId": "CVE-2026-124742", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124742", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124742.json", + "dateUpdated": "2026-11-13T13:32:57.527Z" + }, + { + "cveId": "CVE-2026-125116", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125116", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125116.json", + "dateUpdated": "2026-11-13T13:37:18.947Z" + }, + { + "cveId": "CVE-2026-126261", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126261", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126261.json", + "dateUpdated": "2026-11-13T13:34:05.873Z" + }, + { + "cveId": "CVE-2026-82391", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82391", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82391.json", + "dateUpdated": "2026-11-13T13:36:09.236Z" + }, + { + "cveId": "CVE-2026-88833", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88833", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88833.json", + "dateUpdated": "2026-11-13T13:32:56.894Z" + }, + { + "cveId": "CVE-2026-90832", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90832", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90832.json", + "dateUpdated": "2026-11-13T13:35:26.257Z" + }, + { + "cveId": "CVE-2026-90833", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90833", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90833.json", + "dateUpdated": "2026-11-13T13:36:52.612Z" + }, + { + "cveId": "CVE-2026-90834", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90834", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90834.json", + "dateUpdated": "2026-11-13T13:34:49.079Z" + }, + { + "cveId": "CVE-2026-95520", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95520", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95520.json", + "dateUpdated": "2026-11-13T13:33:52.132Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T13:31:46.911Z", + "numberOfChanges": 8, + "new": [ + { + "cveId": "CVE-2026-127125", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127125", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127125.json", + "dateUpdated": "2026-11-13T13:25:53.422Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-112314", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112314", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112314.json", + "dateUpdated": "2026-11-13T13:30:24.557Z" + }, + { + "cveId": "CVE-2026-120749", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120749", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120749.json", + "dateUpdated": "2026-11-13T13:30:08.715Z" + }, + { + "cveId": "CVE-2026-123876", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123876", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123876.json", + "dateUpdated": "2026-11-13T13:30:43.386Z" + }, + { + "cveId": "CVE-2026-125112", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125112", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125112.json", + "dateUpdated": "2026-11-13T13:31:04.010Z" + }, + { + "cveId": "CVE-2026-92822", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92822", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92822.json", + "dateUpdated": "2026-11-13T13:30:47.771Z" + }, + { + "cveId": "CVE-2026-92823", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92823", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92823.json", + "dateUpdated": "2026-11-13T13:30:48.655Z" + }, + { + "cveId": "CVE-2026-92824", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92824", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92824.json", + "dateUpdated": "2026-11-13T13:30:50.763Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T13:25:45.093Z", + "numberOfChanges": 13, + "new": [ + { + "cveId": "CVE-2026-109096", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109096", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109096.json", + "dateUpdated": "2026-11-13T13:23:13.658Z" + }, + { + "cveId": "CVE-2026-116413", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116413", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116413.json", + "dateUpdated": "2026-11-13T13:25:35.934Z" + }, + { + "cveId": "CVE-2026-124758", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124758", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124758.json", + "dateUpdated": "2026-11-13T13:23:16.149Z" + }, + { + "cveId": "CVE-2026-124759", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124759", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124759.json", + "dateUpdated": "2026-11-13T13:22:56.820Z" + }, + { + "cveId": "CVE-2026-124760", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124760", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124760.json", + "dateUpdated": "2026-11-13T13:23:45.251Z" + }, + { + "cveId": "CVE-2026-124761", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124761", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124761.json", + "dateUpdated": "2026-11-13T13:24:02.359Z" + }, + { + "cveId": "CVE-2026-124762", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124762", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124762.json", + "dateUpdated": "2026-11-13T13:24:25.680Z" + }, + { + "cveId": "CVE-2026-127122", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127122", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127122.json", + "dateUpdated": "2026-11-13T13:24:43.878Z" + }, + { + "cveId": "CVE-2026-127123", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127123", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127123.json", + "dateUpdated": "2026-11-13T13:25:10.082Z" + }, + { + "cveId": "CVE-2026-127124", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127124", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127124.json", + "dateUpdated": "2026-11-13T13:25:33.021Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-124999", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124999", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124999.json", + "dateUpdated": "2026-11-13T13:25:22.188Z" + }, + { + "cveId": "CVE-2026-125108", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125108", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125108.json", + "dateUpdated": "2026-11-13T13:22:27.675Z" + }, + { + "cveId": "CVE-2026-61812", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61812", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61812.json", + "dateUpdated": "2026-11-13T13:21:01.405Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T13:20:05.494Z", + "numberOfChanges": 6, + "new": [ + { + "cveId": "CVE-2026-125800", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125800", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125800.json", + "dateUpdated": "2026-11-13T13:16:41.564Z" + }, + { + "cveId": "CVE-2026-86353", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-86353", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86353.json", + "dateUpdated": "2026-11-13T13:15:43.356Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-123815", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123815", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123815.json", + "dateUpdated": "2026-11-13T13:14:56.541Z" + }, + { + "cveId": "CVE-2026-123819", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123819", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123819.json", + "dateUpdated": "2026-11-13T13:16:14.114Z" + }, + { + "cveId": "CVE-2026-125106", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125106", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125106.json", + "dateUpdated": "2026-11-13T13:18:15.646Z" + }, + { + "cveId": "CVE-2026-93017", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93017", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93017.json", + "dateUpdated": "2026-11-13T13:14:34.913Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-13T13:13:46.303Z", "numberOfChanges": 20, @@ -806786,1409 +807520,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-14T14:12:07.026Z", - "numberOfChanges": 30, - "new": [ - { - "cveId": "CVE-2026-104086", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104086", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104086.json", - "dateUpdated": "2026-10-14T14:06:14.543Z" - }, - { - "cveId": "CVE-2026-107870", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107870", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107870.json", - "dateUpdated": "2026-10-14T14:00:14.386Z" - }, - { - "cveId": "CVE-2026-35161", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-35161", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35161.json", - "dateUpdated": "2026-10-14T14:09:58.302Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-100229", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100229", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100229.json", - "dateUpdated": "2026-10-14T14:11:54.060Z" - }, - { - "cveId": "CVE-2026-101337", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101337", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101337.json", - "dateUpdated": "2026-10-14T14:09:58.370Z" - }, - { - "cveId": "CVE-2026-101338", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101338", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101338.json", - "dateUpdated": "2026-10-14T14:09:20.163Z" - }, - { - "cveId": "CVE-2026-101339", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101339", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101339.json", - "dateUpdated": "2026-10-14T14:08:51.522Z" - }, - { - "cveId": "CVE-2026-101341", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101341", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101341.json", - "dateUpdated": "2026-10-14T14:08:20.283Z" - }, - { - "cveId": "CVE-2026-103904", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103904", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103904.json", - "dateUpdated": "2026-10-14T14:11:26.027Z" - }, - { - "cveId": "CVE-2026-103905", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103905", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103905.json", - "dateUpdated": "2026-10-14T14:10:58.620Z" - }, - { - "cveId": "CVE-2026-107424", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107424", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107424.json", - "dateUpdated": "2026-10-14T14:01:21.121Z" - }, - { - "cveId": "CVE-2026-107431", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107431", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107431.json", - "dateUpdated": "2026-10-14T14:07:43.610Z" - }, - { - "cveId": "CVE-2026-108065", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108065", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108065.json", - "dateUpdated": "2026-10-14T14:00:16.738Z" - }, - { - "cveId": "CVE-2026-108070", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108070", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108070.json", - "dateUpdated": "2026-10-14T14:10:28.915Z" - }, - { - "cveId": "CVE-2026-108071", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108071", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108071.json", - "dateUpdated": "2026-10-14T14:06:44.317Z" - }, - { - "cveId": "CVE-2026-108072", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108072", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108072.json", - "dateUpdated": "2026-10-14T14:05:51.608Z" - }, - { - "cveId": "CVE-2026-109676", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109676", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109676.json", - "dateUpdated": "2026-10-14T14:00:09.112Z" - }, - { - "cveId": "CVE-2026-109833", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109833", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109833.json", - "dateUpdated": "2026-10-14T13:58:54.812Z" - }, - { - "cveId": "CVE-2026-109938", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109938", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109938.json", - "dateUpdated": "2026-10-14T14:02:02.473Z" - }, - { - "cveId": "CVE-2026-109943", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109943", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109943.json", - "dateUpdated": "2026-10-14T14:05:17.824Z" - }, - { - "cveId": "CVE-2026-109948", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109948", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109948.json", - "dateUpdated": "2026-10-14T14:06:41.648Z" - }, - { - "cveId": "CVE-2026-109953", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109953", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109953.json", - "dateUpdated": "2026-10-14T14:07:26.958Z" - }, - { - "cveId": "CVE-2026-109958", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109958", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109958.json", - "dateUpdated": "2026-10-14T14:08:18.404Z" - }, - { - "cveId": "CVE-2026-110652", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110652", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110652.json", - "dateUpdated": "2026-10-14T14:03:28.592Z" - }, - { - "cveId": "CVE-2026-16740", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16740", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16740.json", - "dateUpdated": "2026-10-14T14:02:23.445Z" - }, - { - "cveId": "CVE-2026-16741", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16741", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16741.json", - "dateUpdated": "2026-10-14T14:01:47.144Z" - }, - { - "cveId": "CVE-2026-74034", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-74034", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74034.json", - "dateUpdated": "2026-10-14T14:09:51.932Z" - }, - { - "cveId": "CVE-2026-85298", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85298", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85298.json", - "dateUpdated": "2026-10-14T14:04:02.404Z" - }, - { - "cveId": "CVE-2026-93909", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93909", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93909.json", - "dateUpdated": "2026-10-14T14:08:40.761Z" - }, - { - "cveId": "CVE-2026-97278", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97278", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97278.json", - "dateUpdated": "2026-10-14T14:00:58.678Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T13:58:26.022Z", - "numberOfChanges": 6, - "new": [ - { - "cveId": "CVE-2026-101215", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101215", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101215.json", - "dateUpdated": "2026-10-14T13:54:02.914Z" - }, - { - "cveId": "CVE-2026-94348", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94348", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94348.json", - "dateUpdated": "2026-10-14T13:57:28.608Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-108967", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108967", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108967.json", - "dateUpdated": "2026-10-14T13:58:01.061Z" - }, - { - "cveId": "CVE-2026-109406", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109406", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109406.json", - "dateUpdated": "2026-10-14T13:53:37.297Z" - }, - { - "cveId": "CVE-2026-109614", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109614", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109614.json", - "dateUpdated": "2026-10-14T13:54:37.147Z" - }, - { - "cveId": "CVE-2026-109672", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109672", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109672.json", - "dateUpdated": "2026-10-14T13:56:50.572Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T13:52:40.677Z", - "numberOfChanges": 25, - "new": [ - { - "cveId": "CVE-2026-101217", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101217", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101217.json", - "dateUpdated": "2026-10-14T13:50:08.876Z" - } - ], - "updated": [ - { - "cveId": "CVE-2022-3545", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3545", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3545.json", - "dateUpdated": "2026-10-14T13:47:06.691Z" - }, - { - "cveId": "CVE-2022-3564", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3564", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3564.json", - "dateUpdated": "2026-10-14T13:47:07.837Z" - }, - { - "cveId": "CVE-2022-3565", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3565", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3565.json", - "dateUpdated": "2026-10-14T13:47:09.003Z" - }, - { - "cveId": "CVE-2022-3586", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3586", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3586.json", - "dateUpdated": "2026-10-14T13:51:39.107Z" - }, - { - "cveId": "CVE-2022-3594", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3594", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3594.json", - "dateUpdated": "2026-10-14T13:51:40.262Z" - }, - { - "cveId": "CVE-2022-3606", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3606", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3606.json", - "dateUpdated": "2026-10-14T13:51:41.392Z" - }, - { - "cveId": "CVE-2022-3621", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3621", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3621.json", - "dateUpdated": "2026-10-14T13:51:42.543Z" - }, - { - "cveId": "CVE-2022-3625", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3625", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3625.json", - "dateUpdated": "2026-10-14T13:51:43.713Z" - }, - { - "cveId": "CVE-2022-3628", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3628", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3628.json", - "dateUpdated": "2026-10-14T13:51:44.871Z" - }, - { - "cveId": "CVE-2022-3629", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3629", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3629.json", - "dateUpdated": "2026-10-14T13:51:46.022Z" - }, - { - "cveId": "CVE-2022-3633", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3633", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3633.json", - "dateUpdated": "2026-10-14T13:51:47.172Z" - }, - { - "cveId": "CVE-2022-3635", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3635", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3635.json", - "dateUpdated": "2026-10-14T13:51:48.270Z" - }, - { - "cveId": "CVE-2022-3646", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3646", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3646.json", - "dateUpdated": "2026-10-14T13:51:49.404Z" - }, - { - "cveId": "CVE-2022-3649", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3649", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3649.json", - "dateUpdated": "2026-10-14T13:51:50.499Z" - }, - { - "cveId": "CVE-2022-3715", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3715", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3715.json", - "dateUpdated": "2026-10-14T13:51:52.078Z" - }, - { - "cveId": "CVE-2022-3821", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3821", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3821.json", - "dateUpdated": "2026-10-14T13:51:55.858Z" - }, - { - "cveId": "CVE-2022-4095", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-4095", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/4xxx/CVE-2022-4095.json", - "dateUpdated": "2026-10-14T13:51:57.155Z" - }, - { - "cveId": "CVE-2022-4129", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-4129", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/4xxx/CVE-2022-4129.json", - "dateUpdated": "2026-10-14T13:51:58.346Z" - }, - { - "cveId": "CVE-2022-4139", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-4139", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/4xxx/CVE-2022-4139.json", - "dateUpdated": "2026-10-14T13:51:59.507Z" - }, - { - "cveId": "CVE-2022-4269", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-4269", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/4xxx/CVE-2022-4269.json", - "dateUpdated": "2026-10-14T13:52:00.648Z" - }, - { - "cveId": "CVE-2026-109157", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109157", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109157.json", - "dateUpdated": "2026-10-14T13:50:29.278Z" - }, - { - "cveId": "CVE-2026-109402", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109402", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109402.json", - "dateUpdated": "2026-10-14T13:51:36.839Z" - }, - { - "cveId": "CVE-2026-63357", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63357", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63357.json", - "dateUpdated": "2026-10-14T13:45:44.503Z" - }, - { - "cveId": "CVE-2026-85115", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85115", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85115.json", - "dateUpdated": "2026-10-14T13:47:18.848Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T13:45:28.837Z", - "numberOfChanges": 52, - "new": [ - { - "cveId": "CVE-2026-101216", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101216", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101216.json", - "dateUpdated": "2026-10-14T13:44:40.848Z" - }, - { - "cveId": "CVE-2026-108065", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108065", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108065.json", - "dateUpdated": "2026-10-14T13:38:03.563Z" - }, - { - "cveId": "CVE-2026-110690", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110690", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110690.json", - "dateUpdated": "2026-10-14T13:45:19.632Z" - } - ], - "updated": [ - { - "cveId": "CVE-2022-3028", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3028", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3028.json", - "dateUpdated": "2026-10-14T13:38:30.743Z" - }, - { - "cveId": "CVE-2022-3104", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3104", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3104.json", - "dateUpdated": "2026-10-14T13:38:31.950Z" - }, - { - "cveId": "CVE-2022-3115", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3115", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3115.json", - "dateUpdated": "2026-10-14T13:38:33.388Z" - }, - { - "cveId": "CVE-2022-3169", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3169", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3169.json", - "dateUpdated": "2026-10-14T13:38:34.621Z" - }, - { - "cveId": "CVE-2022-3303", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3303", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3303.json", - "dateUpdated": "2026-10-14T13:38:35.852Z" - }, - { - "cveId": "CVE-2022-3521", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3521", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3521.json", - "dateUpdated": "2026-10-14T13:38:37.065Z" - }, - { - "cveId": "CVE-2022-3524", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3524", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3524.json", - "dateUpdated": "2026-10-14T13:42:34.710Z" - }, - { - "cveId": "CVE-2022-3534", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-3534", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/3xxx/CVE-2022-3534.json", - "dateUpdated": "2026-10-14T13:42:36.247Z" - }, - { - "cveId": "CVE-2026-103307", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103307", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103307.json", - "dateUpdated": "2026-10-14T13:42:24.993Z" - }, - { - "cveId": "CVE-2026-104644", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104644", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104644.json", - "dateUpdated": "2026-10-14T13:42:24.867Z" - }, - { - "cveId": "CVE-2026-104751", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104751", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104751.json", - "dateUpdated": "2026-10-14T13:42:24.523Z" - }, - { - "cveId": "CVE-2026-105261", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105261", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105261.json", - "dateUpdated": "2026-10-14T13:42:24.402Z" - }, - { - "cveId": "CVE-2026-105969", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105969", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105969.json", - "dateUpdated": "2026-10-14T13:42:24.258Z" - }, - { - "cveId": "CVE-2026-105975", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105975", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105975.json", - "dateUpdated": "2026-10-14T13:42:24.134Z" - }, - { - "cveId": "CVE-2026-106098", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106098", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106098.json", - "dateUpdated": "2026-10-14T13:42:24.000Z" - }, - { - "cveId": "CVE-2026-106099", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106099", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106099.json", - "dateUpdated": "2026-10-14T13:42:23.713Z" - }, - { - "cveId": "CVE-2026-106166", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106166", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106166.json", - "dateUpdated": "2026-10-14T13:42:23.597Z" - }, - { - "cveId": "CVE-2026-106646", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106646", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106646.json", - "dateUpdated": "2026-10-14T13:42:23.460Z" - }, - { - "cveId": "CVE-2026-107126", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107126", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107126.json", - "dateUpdated": "2026-10-14T13:42:23.320Z" - }, - { - "cveId": "CVE-2026-107158", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107158", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107158.json", - "dateUpdated": "2026-10-14T13:42:23.187Z" - }, - { - "cveId": "CVE-2026-107160", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107160", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107160.json", - "dateUpdated": "2026-10-14T13:42:23.037Z" - }, - { - "cveId": "CVE-2026-107178", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107178", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107178.json", - "dateUpdated": "2026-10-14T13:42:22.885Z" - }, - { - "cveId": "CVE-2026-107319", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107319", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107319.json", - "dateUpdated": "2026-10-14T13:42:22.749Z" - }, - { - "cveId": "CVE-2026-107320", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107320", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107320.json", - "dateUpdated": "2026-10-14T13:42:22.621Z" - }, - { - "cveId": "CVE-2026-107508", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107508", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107508.json", - "dateUpdated": "2026-10-14T13:42:22.482Z" - }, - { - "cveId": "CVE-2026-107594", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107594", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107594.json", - "dateUpdated": "2026-10-14T13:42:22.350Z" - }, - { - "cveId": "CVE-2026-108064", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108064", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108064.json", - "dateUpdated": "2026-10-14T13:42:22.229Z" - }, - { - "cveId": "CVE-2026-108069", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108069", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108069.json", - "dateUpdated": "2026-10-14T13:42:22.080Z" - }, - { - "cveId": "CVE-2026-108962", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108962", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108962.json", - "dateUpdated": "2026-10-14T13:35:04.573Z" - }, - { - "cveId": "CVE-2026-108971", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108971", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108971.json", - "dateUpdated": "2026-10-14T13:37:18.398Z" - }, - { - "cveId": "CVE-2026-108975", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108975", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108975.json", - "dateUpdated": "2026-10-14T13:38:22.435Z" - }, - { - "cveId": "CVE-2026-109109", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109109", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109109.json", - "dateUpdated": "2026-10-14T13:39:21.755Z" - }, - { - "cveId": "CVE-2026-109116", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109116", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109116.json", - "dateUpdated": "2026-10-14T13:41:03.414Z" - }, - { - "cveId": "CVE-2026-44414", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44414", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44414.json", - "dateUpdated": "2026-10-14T13:43:16.889Z" - }, - { - "cveId": "CVE-2026-63352", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63352", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63352.json", - "dateUpdated": "2026-10-14T13:44:30.952Z" - }, - { - "cveId": "CVE-2026-85000", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85000", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85000.json", - "dateUpdated": "2026-10-14T13:42:21.943Z" - }, - { - "cveId": "CVE-2026-85345", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85345", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85345.json", - "dateUpdated": "2026-10-14T13:42:21.808Z" - }, - { - "cveId": "CVE-2026-86787", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-86787", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86787.json", - "dateUpdated": "2026-10-14T13:42:21.673Z" - }, - { - "cveId": "CVE-2026-86797", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-86797", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86797.json", - "dateUpdated": "2026-10-14T13:42:21.536Z" - }, - { - "cveId": "CVE-2026-86799", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-86799", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86799.json", - "dateUpdated": "2026-10-14T13:42:21.397Z" - }, - { - "cveId": "CVE-2026-87843", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87843", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87843.json", - "dateUpdated": "2026-10-14T13:42:21.248Z" - }, - { - "cveId": "CVE-2026-87968", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87968", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87968.json", - "dateUpdated": "2026-10-14T13:42:21.110Z" - }, - { - "cveId": "CVE-2026-87974", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87974", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87974.json", - "dateUpdated": "2026-10-14T13:42:20.964Z" - }, - { - "cveId": "CVE-2026-88927", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88927", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88927.json", - "dateUpdated": "2026-10-14T13:42:20.827Z" - }, - { - "cveId": "CVE-2026-94260", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94260", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94260.json", - "dateUpdated": "2026-10-14T13:42:20.700Z" - }, - { - "cveId": "CVE-2026-94261", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94261", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94261.json", - "dateUpdated": "2026-10-14T13:42:20.558Z" - }, - { - "cveId": "CVE-2026-94360", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94360", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94360.json", - "dateUpdated": "2026-10-14T13:42:20.329Z" - }, - { - "cveId": "CVE-2026-96900", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96900", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96900.json", - "dateUpdated": "2026-10-14T13:42:20.196Z" - }, - { - "cveId": "CVE-2026-96904", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96904", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96904.json", - "dateUpdated": "2026-10-14T13:42:20.061Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T13:34:54.355Z", - "numberOfChanges": 71, - "new": [ - { - "cveId": "CVE-2026-98386", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98386", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98386.json", - "dateUpdated": "2026-10-14T13:25:50.908Z" - }, - { - "cveId": "CVE-2026-98387", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98387", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98387.json", - "dateUpdated": "2026-10-14T13:25:51.513Z" - }, - { - "cveId": "CVE-2026-98388", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98388", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98388.json", - "dateUpdated": "2026-10-14T13:25:52.117Z" - }, - { - "cveId": "CVE-2026-98389", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98389", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98389.json", - "dateUpdated": "2026-10-14T13:25:52.789Z" - }, - { - "cveId": "CVE-2026-98390", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98390", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98390.json", - "dateUpdated": "2026-10-14T13:25:54.905Z" - }, - { - "cveId": "CVE-2026-98391", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98391", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98391.json", - "dateUpdated": "2026-10-14T13:25:55.498Z" - }, - { - "cveId": "CVE-2026-98392", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98392", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98392.json", - "dateUpdated": "2026-10-14T13:25:56.096Z" - }, - { - "cveId": "CVE-2026-98393", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98393", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98393.json", - "dateUpdated": "2026-10-14T13:25:56.697Z" - }, - { - "cveId": "CVE-2026-98394", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98394", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98394.json", - "dateUpdated": "2026-10-14T13:25:57.287Z" - }, - { - "cveId": "CVE-2026-98395", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98395", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98395.json", - "dateUpdated": "2026-10-14T13:25:57.887Z" - }, - { - "cveId": "CVE-2026-98396", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98396", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98396.json", - "dateUpdated": "2026-10-14T13:25:58.490Z" - }, - { - "cveId": "CVE-2026-98397", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98397", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98397.json", - "dateUpdated": "2026-10-14T13:25:59.081Z" - }, - { - "cveId": "CVE-2026-98398", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98398", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98398.json", - "dateUpdated": "2026-10-14T13:25:59.676Z" - }, - { - "cveId": "CVE-2026-98399", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98399", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98399.json", - "dateUpdated": "2026-10-14T13:26:00.278Z" - }, - { - "cveId": "CVE-2026-98400", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98400", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98400.json", - "dateUpdated": "2026-10-14T13:26:00.872Z" - }, - { - "cveId": "CVE-2026-98401", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98401", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98401.json", - "dateUpdated": "2026-10-14T13:26:01.712Z" - }, - { - "cveId": "CVE-2026-98402", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98402", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98402.json", - "dateUpdated": "2026-10-14T13:26:02.321Z" - }, - { - "cveId": "CVE-2026-98403", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98403", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98403.json", - "dateUpdated": "2026-10-14T13:26:02.916Z" - }, - { - "cveId": "CVE-2026-98404", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98404", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98404.json", - "dateUpdated": "2026-10-14T13:26:03.510Z" - }, - { - "cveId": "CVE-2026-98405", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98405", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98405.json", - "dateUpdated": "2026-10-14T13:27:40.589Z" - }, - { - "cveId": "CVE-2026-98406", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98406", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98406.json", - "dateUpdated": "2026-10-14T13:27:41.192Z" - }, - { - "cveId": "CVE-2026-98407", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98407", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98407.json", - "dateUpdated": "2026-10-14T13:27:41.799Z" - }, - { - "cveId": "CVE-2026-98408", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98408", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98408.json", - "dateUpdated": "2026-10-14T13:27:42.390Z" - }, - { - "cveId": "CVE-2026-98409", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98409", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98409.json", - "dateUpdated": "2026-10-14T13:27:42.984Z" - }, - { - "cveId": "CVE-2026-98410", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98410", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98410.json", - "dateUpdated": "2026-10-14T13:27:43.581Z" - }, - { - "cveId": "CVE-2026-98411", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98411", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98411.json", - "dateUpdated": "2026-10-14T13:27:44.175Z" - }, - { - "cveId": "CVE-2026-98412", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98412", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98412.json", - "dateUpdated": "2026-10-14T13:27:44.772Z" - }, - { - "cveId": "CVE-2026-98413", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98413", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98413.json", - "dateUpdated": "2026-10-14T13:27:45.404Z" - }, - { - "cveId": "CVE-2026-98414", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98414", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98414.json", - "dateUpdated": "2026-10-14T13:27:46.003Z" - }, - { - "cveId": "CVE-2026-98415", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98415", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98415.json", - "dateUpdated": "2026-10-14T13:27:46.596Z" - }, - { - "cveId": "CVE-2026-98416", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98416", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98416.json", - "dateUpdated": "2026-10-14T13:27:47.215Z" - }, - { - "cveId": "CVE-2026-98417", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98417", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98417.json", - "dateUpdated": "2026-10-14T13:27:47.816Z" - }, - { - "cveId": "CVE-2026-98418", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98418", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98418.json", - "dateUpdated": "2026-10-14T13:27:48.406Z" - }, - { - "cveId": "CVE-2026-98419", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98419", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98419.json", - "dateUpdated": "2026-10-14T13:27:49.005Z" - }, - { - "cveId": "CVE-2026-98420", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98420", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98420.json", - "dateUpdated": "2026-10-14T13:27:49.599Z" - }, - { - "cveId": "CVE-2026-98421", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98421", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98421.json", - "dateUpdated": "2026-10-14T13:27:50.200Z" - }, - { - "cveId": "CVE-2026-98422", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98422", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98422.json", - "dateUpdated": "2026-10-14T13:27:50.789Z" - }, - { - "cveId": "CVE-2026-98423", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98423", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98423.json", - "dateUpdated": "2026-10-14T13:27:51.391Z" - }, - { - "cveId": "CVE-2026-98424", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98424", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98424.json", - "dateUpdated": "2026-10-14T13:27:51.975Z" - }, - { - "cveId": "CVE-2026-98425", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98425", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98425.json", - "dateUpdated": "2026-10-14T13:27:52.569Z" - }, - { - "cveId": "CVE-2026-98426", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98426", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98426.json", - "dateUpdated": "2026-10-14T13:27:53.177Z" - }, - { - "cveId": "CVE-2026-98427", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98427", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98427.json", - "dateUpdated": "2026-10-14T13:27:53.770Z" - }, - { - "cveId": "CVE-2026-98428", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98428", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98428.json", - "dateUpdated": "2026-10-14T13:27:54.364Z" - }, - { - "cveId": "CVE-2026-98429", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98429", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98429.json", - "dateUpdated": "2026-10-14T13:27:54.960Z" - }, - { - "cveId": "CVE-2026-98430", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98430", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98430.json", - "dateUpdated": "2026-10-14T13:27:55.566Z" - }, - { - "cveId": "CVE-2026-98431", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98431", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98431.json", - "dateUpdated": "2026-10-14T13:27:56.162Z" - } - ], - "updated": [ - { - "cveId": "CVE-2022-2588", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2588", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2588.json", - "dateUpdated": "2026-10-14T13:25:20.821Z" - }, - { - "cveId": "CVE-2022-2602", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2602", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2602.json", - "dateUpdated": "2026-10-14T13:25:22.050Z" - }, - { - "cveId": "CVE-2022-2663", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2663", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2663.json", - "dateUpdated": "2026-10-14T13:29:18.560Z" - }, - { - "cveId": "CVE-2022-2905", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2905", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2905.json", - "dateUpdated": "2026-10-14T13:33:50.902Z" - }, - { - "cveId": "CVE-2022-2959", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2959", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2959.json", - "dateUpdated": "2026-10-14T13:33:52.071Z" - }, - { - "cveId": "CVE-2022-2978", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2978", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2978.json", - "dateUpdated": "2026-10-14T13:33:53.214Z" - }, - { - "cveId": "CVE-2024-34319", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-34319", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34319.json", - "dateUpdated": "2026-10-14T13:27:56.211Z" - }, - { - "cveId": "CVE-2024-34324", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-34324", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34324.json", - "dateUpdated": "2026-10-14T13:24:35.720Z" - }, - { - "cveId": "CVE-2026-101301", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101301", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101301.json", - "dateUpdated": "2026-10-14T13:33:24.329Z" - }, - { - "cveId": "CVE-2026-103308", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103308", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103308.json", - "dateUpdated": "2026-10-14T13:33:35.512Z" - }, - { - "cveId": "CVE-2026-108719", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108719", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108719.json", - "dateUpdated": "2026-10-14T13:24:03.543Z" - }, - { - "cveId": "CVE-2026-108724", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108724", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108724.json", - "dateUpdated": "2026-10-14T13:24:46.304Z" - }, - { - "cveId": "CVE-2026-108729", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108729", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108729.json", - "dateUpdated": "2026-10-14T13:26:18.118Z" - }, - { - "cveId": "CVE-2026-108734", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108734", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108734.json", - "dateUpdated": "2026-10-14T13:27:15.747Z" - }, - { - "cveId": "CVE-2026-108739", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108739", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108739.json", - "dateUpdated": "2026-10-14T13:28:40.918Z" - }, - { - "cveId": "CVE-2026-108745", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108745", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108745.json", - "dateUpdated": "2026-10-14T13:29:34.913Z" - }, - { - "cveId": "CVE-2026-108750", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108750", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108750.json", - "dateUpdated": "2026-10-14T13:30:48.335Z" - }, - { - "cveId": "CVE-2026-108944", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108944", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108944.json", - "dateUpdated": "2026-10-14T13:31:19.057Z" - }, - { - "cveId": "CVE-2026-108954", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108954", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108954.json", - "dateUpdated": "2026-10-14T13:32:36.559Z" - }, - { - "cveId": "CVE-2026-108958", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108958", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108958.json", - "dateUpdated": "2026-10-14T13:33:35.919Z" - }, - { - "cveId": "CVE-2026-12613", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12613", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12613.json", - "dateUpdated": "2026-10-14T13:24:33.618Z" - }, - { - "cveId": "CVE-2026-82844", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82844", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82844.json", - "dateUpdated": "2026-10-14T13:33:47.446Z" - }, - { - "cveId": "CVE-2026-88998", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88998", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88998.json", - "dateUpdated": "2026-10-14T13:33:57.558Z" - }, - { - "cveId": "CVE-2026-95115", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95115", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95115.json", - "dateUpdated": "2026-10-14T13:30:35.596Z" - }, - { - "cveId": "CVE-2026-97315", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97315", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97315.json", - "dateUpdated": "2026-10-14T13:34:19.073Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T13:24:02.214Z", - "numberOfChanges": 41, - "new": [ - { - "cveId": "CVE-2026-110652", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110652", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110652.json", - "dateUpdated": "2026-10-14T13:15:00.461Z" - } - ], - "updated": [ - { - "cveId": "CVE-2022-2586", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2586", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json", - "dateUpdated": "2026-10-14T13:11:40.118Z" - }, - { - "cveId": "CVE-2026-108714", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108714", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108714.json", - "dateUpdated": "2026-10-14T13:23:01.451Z" - }, - { - "cveId": "CVE-2026-110136", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110136", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110136.json", - "dateUpdated": "2026-10-14T13:22:10.577Z" - }, - { - "cveId": "CVE-2026-110137", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110137", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110137.json", - "dateUpdated": "2026-10-14T13:22:12.564Z" - }, - { - "cveId": "CVE-2026-110138", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110138", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110138.json", - "dateUpdated": "2026-10-14T13:22:09.953Z" - }, - { - "cveId": "CVE-2026-110139", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110139", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110139.json", - "dateUpdated": "2026-10-14T13:22:11.927Z" - }, - { - "cveId": "CVE-2026-110140", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110140", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110140.json", - "dateUpdated": "2026-10-14T13:22:12.446Z" - }, - { - "cveId": "CVE-2026-110141", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110141", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110141.json", - "dateUpdated": "2026-10-14T13:20:10.440Z" - }, - { - "cveId": "CVE-2026-110142", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110142", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110142.json", - "dateUpdated": "2026-10-14T13:15:29.035Z" - }, - { - "cveId": "CVE-2026-110143", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110143", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110143.json", - "dateUpdated": "2026-10-14T13:21:52.614Z" - }, - { - "cveId": "CVE-2026-110144", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110144", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110144.json", - "dateUpdated": "2026-10-14T13:22:10.074Z" - }, - { - "cveId": "CVE-2026-110145", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110145", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110145.json", - "dateUpdated": "2026-10-14T13:22:09.584Z" - }, - { - "cveId": "CVE-2026-110146", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110146", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110146.json", - "dateUpdated": "2026-10-14T13:21:23.543Z" - }, - { - "cveId": "CVE-2026-110147", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110147", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110147.json", - "dateUpdated": "2026-10-14T13:22:11.327Z" - }, - { - "cveId": "CVE-2026-110148", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110148", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110148.json", - "dateUpdated": "2026-10-14T13:22:12.924Z" - }, - { - "cveId": "CVE-2026-110149", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110149", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110149.json", - "dateUpdated": "2026-10-14T13:22:10.698Z" - }, - { - "cveId": "CVE-2026-110150", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110150", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110150.json", - "dateUpdated": "2026-10-14T13:20:57.026Z" - }, - { - "cveId": "CVE-2026-110151", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110151", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110151.json", - "dateUpdated": "2026-10-14T13:22:12.803Z" - }, - { - "cveId": "CVE-2026-110152", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110152", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110152.json", - "dateUpdated": "2026-10-14T13:22:10.825Z" - }, - { - "cveId": "CVE-2026-110153", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110153", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110153.json", - "dateUpdated": "2026-10-14T13:22:12.331Z" - }, - { - "cveId": "CVE-2026-110154", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110154", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110154.json", - "dateUpdated": "2026-10-14T13:22:11.203Z" - }, - { - "cveId": "CVE-2026-110155", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110155", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110155.json", - "dateUpdated": "2026-10-14T13:22:11.082Z" - }, - { - "cveId": "CVE-2026-110156", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110156", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110156.json", - "dateUpdated": "2026-10-14T13:22:09.834Z" - }, - { - "cveId": "CVE-2026-110157", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110157", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110157.json", - "dateUpdated": "2026-10-14T13:22:11.453Z" - }, - { - "cveId": "CVE-2026-110158", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110158", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110158.json", - "dateUpdated": "2026-10-14T13:22:09.708Z" - }, - { - "cveId": "CVE-2026-110159", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110159", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110159.json", - "dateUpdated": "2026-10-14T13:22:10.204Z" - }, - { - "cveId": "CVE-2026-110160", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110160", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110160.json", - "dateUpdated": "2026-10-14T13:22:49.394Z" - }, - { - "cveId": "CVE-2026-110161", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110161", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110161.json", - "dateUpdated": "2026-10-14T13:22:10.456Z" - }, - { - "cveId": "CVE-2026-110162", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110162", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110162.json", - "dateUpdated": "2026-10-14T13:22:12.685Z" - }, - { - "cveId": "CVE-2026-110163", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110163", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110163.json", - "dateUpdated": "2026-10-14T13:22:11.575Z" - }, - { - "cveId": "CVE-2026-110164", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110164", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110164.json", - "dateUpdated": "2026-10-14T13:22:11.693Z" - }, - { - "cveId": "CVE-2026-110165", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110165", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110165.json", - "dateUpdated": "2026-10-14T13:22:10.325Z" - }, - { - "cveId": "CVE-2026-110166", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110166", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110166.json", - "dateUpdated": "2026-10-14T13:22:12.207Z" - }, - { - "cveId": "CVE-2026-110167", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110167", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110167.json", - "dateUpdated": "2026-10-14T13:22:10.967Z" - }, - { - "cveId": "CVE-2026-110168", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110168", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110168.json", - "dateUpdated": "2026-10-14T13:19:33.224Z" - }, - { - "cveId": "CVE-2026-110169", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110169", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110169.json", - "dateUpdated": "2026-10-14T13:22:12.059Z" - }, - { - "cveId": "CVE-2026-110170", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110170", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110170.json", - "dateUpdated": "2026-10-14T13:23:18.934Z" - }, - { - "cveId": "CVE-2026-110171", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110171", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110171.json", - "dateUpdated": "2026-10-14T13:16:38.705Z" - }, - { - "cveId": "CVE-2026-110172", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110172", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110172.json", - "dateUpdated": "2026-10-14T13:22:11.812Z" - }, - { - "cveId": "CVE-2026-18390", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18390", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18390.json", - "dateUpdated": "2026-10-14T13:23:10.391Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 91cacace3e..77b497f961 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "5697f0202b86659fbe59c05044ddd8f17377f553", + "upstream_commit": "21db06d5f7f7ac12f8a5573d27e8825f177289e1", "since_year": 2017, - "records": 332233, - "synced_at_utc": "2026-11-13T13:26:10.443113+00:00" + "records": 332255, + "synced_at_utc": "2026-11-13T14:25:08.314292+00:00" }