CVE sync 2026-11-13T17:30:50Z
This commit is contained in:
Vulnerability Bot committed
1 parent
5de1f11943
commit
4c7e827522
110 files changed
+8908
-18345
No files matched your search
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2025-10-23T08:45:24.756Z",
|
||||
"datePublished": "2026-11-10T19:20:11.752Z",
|
||||
"dateUpdated": "2026-11-13T05:02:14.523Z"
|
||||
"dateUpdated": "2026-11-13T16:22:23.887Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -57,13 +57,41 @@
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-693",
|
||||
"lang": "en",
|
||||
"description": "CWE-693 Protection Mechanism Failure"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.7,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T00:00:00+00:00",
|
||||
"timestamp": "2026-11-13T05:02:15.339608Z",
|
||||
"id": "CVE-2026-0178",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
@@ -76,16 +104,16 @@
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3",
|
||||
"id": "CVE-2026-0178"
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T05:02:14.523Z"
|
||||
"dateUpdated": "2026-11-13T16:22:23.887Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-10-01T11:51:10.972Z",
|
||||
"datePublished": "2026-10-07T05:46:18.911Z",
|
||||
"dateUpdated": "2026-11-13T00:17:20.047Z"
|
||||
"dateUpdated": "2026-11-13T16:59:19.090Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -224,6 +224,46 @@
|
||||
"cpe:/a:redhat:satellite_utils:6.18::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "python3.12-pulp-rpm",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:3.32.15-1.el9pc",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "python3.12-pulp-rpm",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:3.32.15-1.el9pc",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Update Infrastructure 4 for Cloud Providers",
|
||||
@@ -276,6 +316,14 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:100120",
|
||||
"name": "RHSA-2026:100120",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99949",
|
||||
"name": "RHSA-2026:99949",
|
||||
@@ -357,7 +405,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-13T00:17:20.047Z"
|
||||
"dateUpdated": "2026-11-13T16:59:19.090Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,16 +8,16 @@
|
||||
"assignerShortName": "ENISA",
|
||||
"dateReserved": "2026-10-01T14:12:50.876Z",
|
||||
"datePublished": "2026-11-09T16:11:22.385Z",
|
||||
"dateUpdated": "2026-11-09T17:34:42.085Z"
|
||||
"dateUpdated": "2026-11-13T16:58:15.265Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
|
||||
"shortName": "ENISA",
|
||||
"dateUpdated": "2026-11-09T16:11:22.385Z"
|
||||
"dateUpdated": "2026-11-13T16:58:15.265Z"
|
||||
},
|
||||
"title": "Disabled TLS Certificate Validation Enables MITM Attacks",
|
||||
"title": "AM Club (Hard-coded MQTT Credentials)",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "NCSC.ch",
|
||||
"dateReserved": "2026-10-02T11:43:59.014Z",
|
||||
"datePublished": "2026-10-02T13:21:59.195Z",
|
||||
"dateUpdated": "2026-10-02T13:21:59.195Z"
|
||||
"dateUpdated": "2026-11-13T16:21:28.836Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -172,6 +172,40 @@
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 0.2.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-10-02T13:58:10.145529Z",
|
||||
"id": "CVE-2026-104721",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:21:28.836Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Kong",
|
||||
"dateReserved": "2026-10-06T10:15:07.004Z",
|
||||
"datePublished": "2026-11-10T21:03:18.235Z",
|
||||
"dateUpdated": "2026-11-10T21:06:05.914Z"
|
||||
"dateUpdated": "2026-11-13T16:41:37.252Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -168,6 +168,40 @@
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.5"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:41:27.080121Z",
|
||||
"id": "CVE-2026-105986",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:41:37.252Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-10-06T17:50:50.111Z",
|
||||
"datePublished": "2026-10-07T01:49:11.112Z",
|
||||
"dateUpdated": "2026-11-12T23:56:15.326Z"
|
||||
"dateUpdated": "2026-11-13T16:58:15.410Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -135,9 +135,37 @@
|
||||
"cpe:/a:redhat:satellite_maintenance:6.18::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.18::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "candlepin",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:4.7.7-2.el9sat",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:100120",
|
||||
"name": "RHSA-2026:100120",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99949",
|
||||
"name": "RHSA-2026:99949",
|
||||
@@ -219,7 +247,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-12T23:56:15.326Z"
|
||||
"dateUpdated": "2026-11-13T16:58:15.410Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-10-07T10:19:09.047Z",
|
||||
"datePublished": "2026-11-12T20:04:09.664Z",
|
||||
"dateUpdated": "2026-11-13T15:38:20.935Z"
|
||||
"dateUpdated": "2026-11-13T16:58:21.597Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -223,9 +223,57 @@
|
||||
"cpe:/a:redhat:satellite_maintenance:6.18::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.18::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rubygem-smart_proxy_dynflow",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:1.0.0-3.el9sat",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rubygem-smart_proxy_dynflow",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:1.0.0-3.el9sat",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:100120",
|
||||
"name": "RHSA-2026:100120",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99949",
|
||||
"name": "RHSA-2026:99949",
|
||||
@@ -307,7 +355,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-12T23:56:19.679Z"
|
||||
"dateUpdated": "2026-11-13T16:58:21.597Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-10-07T20:07:22.060Z",
|
||||
"datePublished": "2026-11-12T20:04:13.447Z",
|
||||
"dateUpdated": "2026-11-12T23:56:20.667Z"
|
||||
"dateUpdated": "2026-11-13T16:58:25.857Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -135,9 +135,37 @@
|
||||
"cpe:/a:redhat:satellite_maintenance:6.18::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.18::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rubygem-safemode",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:1.5.0-3.el9sat",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:100120",
|
||||
"name": "RHSA-2026:100120",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99949",
|
||||
"name": "RHSA-2026:99949",
|
||||
@@ -219,11 +247,45 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-12T23:56:20.667Z"
|
||||
"dateUpdated": "2026-11-13T16:58:25.857Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T15:34:51.731568Z",
|
||||
"id": "CVE-2026-107360",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:27:43.464Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-10-08T02:33:13.616Z",
|
||||
"datePublished": "2026-11-12T20:04:14.109Z",
|
||||
"dateUpdated": "2026-11-13T00:30:34.619Z"
|
||||
"dateUpdated": "2026-11-13T16:58:34.823Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -135,9 +135,37 @@
|
||||
"cpe:/a:redhat:satellite_maintenance:6.18::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.18::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "foreman",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:3.18.0.19-1.el9sat",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:100120",
|
||||
"name": "RHSA-2026:100120",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99949",
|
||||
"name": "RHSA-2026:99949",
|
||||
@@ -222,7 +250,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-12T23:56:24.678Z"
|
||||
"dateUpdated": "2026-11-13T16:58:34.823Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Zoom",
|
||||
"dateReserved": "2026-10-09T17:15:48.426Z",
|
||||
"datePublished": "2026-11-10T15:35:24.732Z",
|
||||
"dateUpdated": "2026-11-11T04:55:51.937Z"
|
||||
"dateUpdated": "2026-11-13T16:21:56.215Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -100,13 +100,13 @@
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-10T00:00:00+00:00",
|
||||
"timestamp": "2026-11-11T04:55:52.991470Z",
|
||||
"id": "CVE-2026-108187",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
@@ -119,16 +119,16 @@
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3",
|
||||
"id": "CVE-2026-108187"
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T04:55:51.937Z"
|
||||
"dateUpdated": "2026-11-13T16:21:56.215Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-10-16T04:40:13.923Z",
|
||||
"datePublished": "2026-11-12T20:04:18.836Z",
|
||||
"dateUpdated": "2026-11-12T23:56:23.174Z"
|
||||
"dateUpdated": "2026-11-13T16:58:43.950Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -135,9 +135,37 @@
|
||||
"cpe:/a:redhat:satellite_maintenance:6.18::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.18::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "candlepin",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:4.7.7-2.el9sat",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:100120",
|
||||
"name": "RHSA-2026:100120",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99949",
|
||||
"name": "RHSA-2026:99949",
|
||||
@@ -219,7 +247,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-12T23:56:23.174Z"
|
||||
"dateUpdated": "2026-11-13T16:58:43.950Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Patchstack",
|
||||
"dateReserved": "2026-10-19T19:23:59.818Z",
|
||||
"datePublished": "2026-11-13T13:04:13.573Z",
|
||||
"dateUpdated": "2026-11-13T13:05:15.375Z"
|
||||
"dateUpdated": "2026-11-13T16:42:40.134Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -134,6 +134,40 @@
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:42:30.635121Z",
|
||||
"id": "CVE-2026-112830",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:42:40.134Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-10-23T18:33:00.912Z",
|
||||
"datePublished": "2026-11-13T09:35:10.951Z",
|
||||
"dateUpdated": "2026-11-13T09:35:10.951Z"
|
||||
"dateUpdated": "2026-11-13T16:34:53.285Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -101,6 +101,40 @@
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:34:40.600957Z",
|
||||
"id": "CVE-2026-115871",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:34:53.285Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,14 +8,14 @@
|
||||
"assignerShortName": "VulDB",
|
||||
"dateReserved": "2026-10-26T08:12:51.189Z",
|
||||
"datePublished": "2026-10-26T16:30:18.290Z",
|
||||
"dateUpdated": "2026-11-09T15:15:49.432Z"
|
||||
"dateUpdated": "2026-11-13T17:08:36.356Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
|
||||
"shortName": "VulDB",
|
||||
"dateUpdated": "2026-11-09T15:15:49.432Z"
|
||||
"dateUpdated": "2026-11-13T17:08:36.356Z"
|
||||
},
|
||||
"title": "Akuvox Akubela HyPanel PS51 login improper authentication",
|
||||
"problemTypes": [
|
||||
@@ -38,6 +38,10 @@
|
||||
{
|
||||
"version": "51.130.40.26",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "51.130.40.31",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
@@ -48,7 +52,7 @@
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argument engrmode with the input admin can lead to improper authentication. The attack may be launched remotely. An official firmware patch is currently in development and will be released soon."
|
||||
"value": "A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argument engrmode with the input admin can lead to improper authentication. The attack may be launched remotely. Upgrading to version 51.130.40.31 is sufficient to resolve this issue. It is recommended to upgrade the affected component."
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
@@ -64,7 +68,7 @@
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"baseScore": 6.3,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C",
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
@@ -72,7 +76,7 @@
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"baseScore": 6.3,
|
||||
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
|
||||
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C",
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
@@ -80,7 +84,7 @@
|
||||
"cvssV2_0": {
|
||||
"version": "2.0",
|
||||
"baseScore": 7.5,
|
||||
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:C"
|
||||
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:OF/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
@@ -96,7 +100,7 @@
|
||||
"value": "VulDB entry created"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-09T16:20:38.000Z",
|
||||
"time": "2026-11-13T18:13:22.000Z",
|
||||
"lang": "en",
|
||||
"value": "VulDB entry last update"
|
||||
}
|
||||
@@ -126,11 +130,6 @@
|
||||
"lang": "en",
|
||||
"value": "Wisklr (VulDB User)",
|
||||
"type": "analyst"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "VulDB CNA Team",
|
||||
"type": "coordinator"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
@@ -169,6 +168,18 @@
|
||||
"tags": [
|
||||
"broken-link"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://akubela.com/securitycompliance/security-notice-improper-authentication-in-hypanel-ps51",
|
||||
"tags": [
|
||||
"related"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://we.tl/t-OvOfjo6KwRRQeCe1",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
}
|
||||
],
|
||||
"x_generator": [
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "adobe",
|
||||
"dateReserved": "2026-10-28T11:11:00.477Z",
|
||||
"datePublished": "2026-11-10T21:56:40.914Z",
|
||||
"dateUpdated": "2026-11-10T21:56:40.914Z"
|
||||
"dateUpdated": "2026-11-13T16:52:14.703Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -95,6 +95,40 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:51:17.240449Z",
|
||||
"id": "CVE-2026-118479",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:52:14.703Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-10-28T16:15:20.499Z",
|
||||
"datePublished": "2026-11-13T09:35:18.085Z",
|
||||
"dateUpdated": "2026-11-13T09:35:18.085Z"
|
||||
"dateUpdated": "2026-11-13T16:35:55.589Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -97,6 +97,40 @@
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:35:44.792443Z",
|
||||
"id": "CVE-2026-118587",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:35:55.589Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-11-02T09:41:54.480Z",
|
||||
"datePublished": "2026-11-10T14:08:33.545Z",
|
||||
"dateUpdated": "2026-11-10T14:08:33.545Z"
|
||||
"dateUpdated": "2026-11-13T16:16:53.673Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -152,6 +152,40 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:15:44.789102Z",
|
||||
"id": "CVE-2026-120399",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:16:53.673Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-11-02T19:24:28.770Z",
|
||||
"datePublished": "2026-11-13T09:35:12.209Z",
|
||||
"dateUpdated": "2026-11-13T09:35:12.209Z"
|
||||
"dateUpdated": "2026-11-13T16:37:07.895Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -100,6 +100,40 @@
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:36:52.976497Z",
|
||||
"id": "CVE-2026-120688",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:37:07.895Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Arista",
|
||||
"dateReserved": "2026-11-03T11:27:14.150Z",
|
||||
"datePublished": "2026-11-10T20:10:00.972Z",
|
||||
"dateUpdated": "2026-11-10T20:10:00.972Z"
|
||||
"dateUpdated": "2026-11-13T16:42:38.757Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -136,6 +136,40 @@
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:42:27.455014Z",
|
||||
"id": "CVE-2026-121369",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:42:38.757Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,418 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-121809",
|
||||
"assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "EEF",
|
||||
"dateReserved": "2026-11-13T11:19:13.834Z",
|
||||
"datePublished": "2026-11-13T16:18:37.954Z",
|
||||
"dateUpdated": "2026-11-13T16:18:37.954Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"collectionURL": "https://repo.hex.pm",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"modules": [
|
||||
"'Elixir.GRPC.Server.Adapters.Cowboy'"
|
||||
],
|
||||
"packageName": "grpc_server",
|
||||
"packageURL": "pkg:hex/grpc_server",
|
||||
"product": "grpc_server",
|
||||
"programFiles": [
|
||||
"lib/grpc/server/adapters/cowboy.ex"
|
||||
],
|
||||
"programRoutines": [
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"
|
||||
},
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"
|
||||
}
|
||||
],
|
||||
"repo": "https://github.com/elixir-grpc/grpc",
|
||||
"vendor": "elixir-grpc",
|
||||
"versions": [
|
||||
{
|
||||
"lessThan": "1.1.0",
|
||||
"status": "affected",
|
||||
"version": "1.0.0",
|
||||
"versionType": "semver"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"collectionURL": "https://github.com",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"modules": [
|
||||
"'Elixir.GRPC.Server.Adapters.Cowboy'"
|
||||
],
|
||||
"packageName": "elixir-grpc/grpc",
|
||||
"packageURL": "pkg:github/elixir-grpc/grpc",
|
||||
"product": "grpc_server",
|
||||
"programFiles": [
|
||||
"grpc_server/lib/grpc/server/adapters/cowboy.ex"
|
||||
],
|
||||
"programRoutines": [
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"
|
||||
},
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"
|
||||
}
|
||||
],
|
||||
"repo": "https://github.com/elixir-grpc/grpc",
|
||||
"vendor": "elixir-grpc",
|
||||
"versions": [
|
||||
{
|
||||
"lessThan": "38955f1392cbf08eef231a347348445410455c85",
|
||||
"status": "affected",
|
||||
"version": "0332faae5f5e132314794dbfdae5edecbccea292",
|
||||
"versionType": "git"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"collectionURL": "https://repo.hex.pm",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:elixir-grpc:grpc:*:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"modules": [
|
||||
"'Elixir.GRPC.Server.Adapters.Cowboy'"
|
||||
],
|
||||
"packageName": "grpc",
|
||||
"packageURL": "pkg:hex/grpc",
|
||||
"product": "grpc",
|
||||
"programFiles": [
|
||||
"lib/grpc/server/adapters/cowboy.ex"
|
||||
],
|
||||
"programRoutines": [
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"
|
||||
},
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"
|
||||
}
|
||||
],
|
||||
"repo": "https://github.com/elixir-grpc/grpc",
|
||||
"vendor": "elixir-grpc",
|
||||
"versions": [
|
||||
{
|
||||
"lessThan": "1.0.0",
|
||||
"status": "affected",
|
||||
"version": "0.3.1",
|
||||
"versionType": "semver"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"collectionURL": "https://github.com",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:elixir-grpc:grpc:*:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"modules": [
|
||||
"'Elixir.GRPC.Server.Adapters.Cowboy'"
|
||||
],
|
||||
"packageName": "elixir-grpc/grpc",
|
||||
"packageURL": "pkg:github/elixir-grpc/grpc",
|
||||
"product": "grpc",
|
||||
"programFiles": [
|
||||
"lib/grpc/server/adapters/cowboy.ex"
|
||||
],
|
||||
"programRoutines": [
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"
|
||||
},
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"
|
||||
}
|
||||
],
|
||||
"repo": "https://github.com/elixir-grpc/grpc",
|
||||
"vendor": "elixir-grpc",
|
||||
"versions": [
|
||||
{
|
||||
"lessThan": "0332faae5f5e132314794dbfdae5edecbccea292",
|
||||
"status": "affected",
|
||||
"version": "6d8a09ad919e208fb600538ac8b19bd733a04310",
|
||||
"versionType": "git"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "<p>The server must expose at least one client-streaming or bidirectional-streaming RPC method.</p>"
|
||||
},
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/markdown",
|
||||
"value": "The server must expose at least one client-streaming or bidirectional-streaming RPC method."
|
||||
}
|
||||
],
|
||||
"value": "The server must expose at least one client-streaming or bidirectional-streaming RPC method."
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"cpeMatch": [
|
||||
{
|
||||
"criteria": "cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "1.1.0",
|
||||
"versionStartIncluding": "1.0.0",
|
||||
"vulnerable": true
|
||||
},
|
||||
{
|
||||
"criteria": "cpe:2.3:a:elixir-grpc:grpc:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "1.0.0",
|
||||
"versionStartIncluding": "0.3.1",
|
||||
"vulnerable": true
|
||||
}
|
||||
],
|
||||
"negate": false,
|
||||
"operator": "OR"
|
||||
}
|
||||
],
|
||||
"operator": "AND"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "reporter",
|
||||
"value": "Adam Jordan"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "finder",
|
||||
"value": "Adam Jordan"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "remediation developer",
|
||||
"value": "Marko Vejnovic"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "remediation reviewer",
|
||||
"value": "Paulo Valente"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "coordinator",
|
||||
"value": "Peter Ullrich"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "coordinator",
|
||||
"value": "Jonatan Männchen / EEF"
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-11-13T11:19:46.000Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "<p>Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in elixir-grpc grpc_server and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request whose body ends inside a gRPC message.</p>\n<p><code>GRPC.Server.Adapters.Cowboy.read_stream/1</code> (<code>grpc_server/lib/grpc/server/adapters/cowboy.ex</code>, and the Cowboy adapter in <code>grpc</code> before the package split) asks for more data whenever the buffer does not hold a complete message. Once the request body has ended, every further read returns an empty chunk, so the buffer never changes and the function retries without end. A single 5-byte length prefix sent with <code>END_STREAM</code> keeps one scheduler busy for as long as the connection stays open, and repeated requests exhaust all schedulers.</p>\n<p>This issue affects grpc_server: from 1.0.0 before 1.1.0; grpc: from 0.3.1 before 1.0.0.</p>"
|
||||
},
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/markdown",
|
||||
"value": "Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in elixir-grpc grpc_server and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request whose body ends inside a gRPC message.\n\n`GRPC.Server.Adapters.Cowboy.read_stream/1` (`grpc_server/lib/grpc/server/adapters/cowboy.ex`, and the Cowboy adapter in `grpc` before the package split) asks for more data whenever the buffer does not hold a complete message. Once the request body has ended, every further read returns an empty chunk, so the buffer never changes and the function retries without end. A single 5-byte length prefix sent with `END_STREAM` keeps one scheduler busy for as long as the connection stays open, and repeated requests exhaust all schedulers.\n\nThis issue affects grpc_server: from 1.0.0 before 1.1.0; grpc: from 0.3.1 before 1.0.0."
|
||||
}
|
||||
],
|
||||
"value": "Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in elixir-grpc grpc_server and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request whose body ends inside a gRPC message.\n\nGRPC.Server.Adapters.Cowboy.read_stream/1 (grpc_server/lib/grpc/server/adapters/cowboy.ex, and the Cowboy adapter in grpc before the package split) asks for more data whenever the buffer does not hold a complete message. Once the request body has ended, every further read returns an empty chunk, so the buffer never changes and the function retries without end. A single 5-byte length prefix sent with END_STREAM keeps one scheduler busy for as long as the connection stays open, and repeated requests exhaust all schedulers.\n\nThis issue affects grpc_server: from 1.0.0 before 1.1.0; grpc: from 0.3.1 before 1.0.0."
|
||||
}
|
||||
],
|
||||
"impacts": [
|
||||
{
|
||||
"capecId": "CAPEC-130",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "<p>An unauthenticated client can keep one scheduler busy per open connection with a 5-byte request, and enough connections deny service to every application on the node.</p>"
|
||||
},
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/markdown",
|
||||
"value": "An unauthenticated client can keep one scheduler busy per open connection with a 5-byte request, and enough connections deny service to every application on the node."
|
||||
}
|
||||
],
|
||||
"value": "An unauthenticated client can keep one scheduler busy per open connection with a 5-byte request, and enough connections deny service to every application on the node."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"attackVector": "NETWORK",
|
||||
"baseScore": 8.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
|
||||
"version": "4.0",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-400",
|
||||
"description": "CWE-400 Uncontrolled Resource Consumption",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-835",
|
||||
"description": "CWE-835 Loop with Unreachable Exit Condition",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
|
||||
"shortName": "EEF",
|
||||
"dateUpdated": "2026-11-13T16:18:37.954Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
"name": "CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"related"
|
||||
],
|
||||
"url": "https://github.com/elixir-grpc/grpc/security/advisories/GHSA-c2h9-f9cc-27xh"
|
||||
},
|
||||
{
|
||||
"name": "EEF CNA record for CVE-2026-121809",
|
||||
"tags": [
|
||||
"related"
|
||||
],
|
||||
"url": "https://cna.erlef.org/cves/CVE-2026-121809.html"
|
||||
},
|
||||
{
|
||||
"name": "OSV record EEF-CVE-2026-121809",
|
||||
"tags": [
|
||||
"related"
|
||||
],
|
||||
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-121809"
|
||||
},
|
||||
{
|
||||
"name": "Introducing commit 0332faa in elixir-grpc/grpc",
|
||||
"tags": [
|
||||
"related"
|
||||
],
|
||||
"url": "https://github.com/elixir-grpc/grpc/commit/0332faae5f5e132314794dbfdae5edecbccea292"
|
||||
},
|
||||
{
|
||||
"name": "Fix commit 38955f1 in elixir-grpc/grpc",
|
||||
"tags": [
|
||||
"patch"
|
||||
],
|
||||
"url": "https://github.com/elixir-grpc/grpc/commit/38955f1392cbf08eef231a347348445410455c85"
|
||||
},
|
||||
{
|
||||
"name": "Introducing commit 6d8a09a in elixir-grpc/grpc",
|
||||
"tags": [
|
||||
"related"
|
||||
],
|
||||
"url": "https://github.com/elixir-grpc/grpc/commit/6d8a09ad919e208fb600538ac8b19bd733a04310"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "EXTERNAL"
|
||||
},
|
||||
"title": "CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server",
|
||||
"x_proofOfConcept": [
|
||||
{
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "<ol>\n<li>Start a server that exposes a client-streaming RPC, for example <code>RouteGuide.RecordRoute</code>.</li>\n<li>Open an HTTP/2 connection and send <code>HEADERS</code> for that method with <code>content-type: application/grpc</code> and no <code>grpc-timeout</code>.</li>\n<li>Send one <code>DATA</code> frame with <code>END_STREAM</code> that holds only the 5-byte prefix <code>00 00 00 00 64</code>, which declares a 100-byte message.</li>\n<li>Keep the connection open and observe that no response arrives and one BEAM scheduler stays at 100% CPU until the connection closes.</li>\n</ol>"
|
||||
},
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/markdown",
|
||||
"value": "1. Start a server that exposes a client-streaming RPC, for example `RouteGuide.RecordRoute`.\n2. Open an HTTP/2 connection and send `HEADERS` for that method with `content-type: application/grpc` and no `grpc-timeout`.\n3. Send one `DATA` frame with `END_STREAM` that holds only the 5-byte prefix `00 00 00 00 64`, which declares a 100-byte message.\n4. Keep the connection open and observe that no response arrives and one BEAM scheduler stays at 100% CPU until the connection closes."
|
||||
}
|
||||
],
|
||||
"value": "* Start a server that exposes a client-streaming RPC, for example RouteGuide.RecordRoute.\n* Open an HTTP/2 connection and send HEADERS for that method with content-type: application/grpc and no grpc-timeout.\n* Send one DATA frame with END_STREAM that holds only the 5-byte prefix 00 00 00 00 64, which declares a 100-byte message.\n* Keep the connection open and observe that no response arrives and one BEAM scheduler stays at 100% CPU until the connection closes."
|
||||
}
|
||||
],
|
||||
"x_technicalAnalysis": [
|
||||
{
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "<p><strong>1. A partial message</strong></p>\n<p>A client sends a 5-byte gRPC length prefix that declares more bytes than follow it, and ends the request body with <code>END_STREAM</code>.</p>\n<p><strong>2. The reader asks for more</strong></p>\n<p><code>read_stream/1</code> calls <code>GRPC.Message.get_message/1</code>, which returns <code>false</code> because the declared message is incomplete. <code>read_stream/1</code> then sets <code>need_more</code> and reads again through <code>Handler.read_body/1</code>.</p>\n<p><strong>3. Every read is empty</strong></p>\n<p>Once the body has been read, the handler's <code>async_read_body/2</code> (and <code>cowboy_req:read_body/2</code> in older releases) returns an empty chunk at once. The buffer stays the same, the exit clause for an empty finished buffer never matches, and the loop repeats.</p>\n<p><strong>4. No timeout ends it</strong></p>\n<p>Each iteration is a message round trip between two local processes, not a socket wait, so no I/O timeout applies. Without a <code>grpc-timeout</code> header there is no deadline, and the adapter's idle timeout defaults to <code>:infinity</code>. One scheduler stays at full load until the client closes the connection.</p>"
|
||||
},
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/markdown",
|
||||
"value": "**1. A partial message**\n\nA client sends a 5-byte gRPC length prefix that declares more bytes than follow it, and ends the request body with `END_STREAM`.\n\n**2. The reader asks for more**\n\n`read_stream/1` calls `GRPC.Message.get_message/1`, which returns `false` because the declared message is incomplete. `read_stream/1` then sets `need_more` and reads again through `Handler.read_body/1`.\n\n**3. Every read is empty**\n\nOnce the body has been read, the handler's `async_read_body/2` (and `cowboy_req:read_body/2` in older releases) returns an empty chunk at once. The buffer stays the same, the exit clause for an empty finished buffer never matches, and the loop repeats.\n\n**4. No timeout ends it**\n\nEach iteration is a message round trip between two local processes, not a socket wait, so no I/O timeout applies. Without a `grpc-timeout` header there is no deadline, and the adapter's idle timeout defaults to `:infinity`. One scheduler stays at full load until the client closes the connection."
|
||||
}
|
||||
],
|
||||
"value": "1. A partial message\n\nA client sends a 5-byte gRPC length prefix that declares more bytes than follow it, and ends the request body with END_STREAM.\n\n2. The reader asks for more\n\nread_stream/1 calls GRPC.Message.get_message/1, which returns false because the declared message is incomplete. read_stream/1 then sets need_more and reads again through Handler.read_body/1.\n\n3. Every read is empty\n\nOnce the body has been read, the handler's async_read_body/2 (and cowboy_req:read_body/2 in older releases) returns an empty chunk at once. The buffer stays the same, the exit clause for an empty finished buffer never matches, and the loop repeats.\n\n4. No timeout ends it\n\nEach iteration is a message round trip between two local processes, not a socket wait, so no I/O timeout applies. Without a grpc-timeout header there is no deadline, and the adapter's idle timeout defaults to :infinity. One scheduler stays at full load until the client closes the connection."
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "adobe",
|
||||
"dateReserved": "2026-11-04T11:19:10.449Z",
|
||||
"datePublished": "2026-11-10T21:30:45.342Z",
|
||||
"dateUpdated": "2026-11-10T21:30:45.342Z"
|
||||
"dateUpdated": "2026-11-13T16:38:11.500Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -186,6 +186,40 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:37:54.147961Z",
|
||||
"id": "CVE-2026-121890",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:38:11.500Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "adobe",
|
||||
"dateReserved": "2026-11-04T11:19:10.451Z",
|
||||
"datePublished": "2026-11-10T21:30:51.294Z",
|
||||
"dateUpdated": "2026-11-10T21:30:51.294Z"
|
||||
"dateUpdated": "2026-11-13T16:40:26.798Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -186,6 +186,40 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:40:15.941310Z",
|
||||
"id": "CVE-2026-121910",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:40:26.798Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "adobe",
|
||||
"dateReserved": "2026-11-04T17:33:55.381Z",
|
||||
"datePublished": "2026-11-10T21:19:43.259Z",
|
||||
"dateUpdated": "2026-11-10T21:19:43.259Z"
|
||||
"dateUpdated": "2026-11-13T16:28:03.591Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -132,6 +132,40 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:26:57.740622Z",
|
||||
"id": "CVE-2026-122097",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:28:03.591Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "checkpoint",
|
||||
"dateReserved": "2026-11-05T07:30:18.138Z",
|
||||
"datePublished": "2026-11-12T14:02:13.665Z",
|
||||
"dateUpdated": "2026-11-12T14:02:13.665Z"
|
||||
"dateUpdated": "2026-11-13T16:27:35.594Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -121,6 +121,40 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T11:43:47.126754Z",
|
||||
"id": "CVE-2026-123039",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:27:35.594Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "adobe",
|
||||
"dateReserved": "2026-11-05T18:08:36.763Z",
|
||||
"datePublished": "2026-11-10T21:56:49.543Z",
|
||||
"dateUpdated": "2026-11-10T21:56:49.543Z"
|
||||
"dateUpdated": "2026-11-13T16:41:42.287Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -131,6 +131,40 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:41:15.802464Z",
|
||||
"id": "CVE-2026-123258",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:41:42.287Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "adobe",
|
||||
"dateReserved": "2026-11-05T18:08:36.763Z",
|
||||
"datePublished": "2026-11-10T21:19:38.345Z",
|
||||
"dateUpdated": "2026-11-10T21:19:38.345Z"
|
||||
"dateUpdated": "2026-11-13T16:26:16.373Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -132,6 +132,40 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:24:35.288688Z",
|
||||
"id": "CVE-2026-123260",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:26:16.373Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,158 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-123965",
|
||||
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "cisa-cg",
|
||||
"dateReserved": "2026-11-06T17:15:53.257Z",
|
||||
"datePublished": "2026-11-13T17:12:17.002Z",
|
||||
"dateUpdated": "2026-11-13T17:12:17.002Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A prompt injection vulnerability in all versions of Jet Admin Cloud Platform allows a remote attacker with a free account to expose sensitive .env configuration files and exfiltrate critical credentials. Mitigated via sandbox component around October 29, 2026."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Jet Admin",
|
||||
"product": "Jet Admin Cloud Platform",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThan": "*",
|
||||
"versionType": "custom"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"exclusively-hosted-service"
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
|
||||
"lang": "en",
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-200"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"baseScore": 9.3,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "CRITICAL",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:H",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"subAvailabilityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"vulnConfidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "CHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 9.9,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "CRITICAL",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L",
|
||||
"integrityImpact": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-06T17:31:49.700138Z",
|
||||
"id": "CVE-2026-123965",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "Jet Admin cloud platform prompt injection",
|
||||
"references": [
|
||||
{
|
||||
"name": "url",
|
||||
"url": "https://www.jetadmin.io/",
|
||||
"tags": [
|
||||
"product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "url",
|
||||
"url": "https://www.jetadmin.io/changelog",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "url",
|
||||
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-317-01.json",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "url",
|
||||
"url": "https://www.cve.org/CVERecord?id=CVE-2026-123965",
|
||||
"tags": [
|
||||
"vdb-entry"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"value": "Mahmoud Elkhaligy",
|
||||
"lang": "en"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "VINCE-NT 1.15.4+build.174"
|
||||
},
|
||||
"datePublic": "2026-11-13T00:00:00.000Z",
|
||||
"providerMetadata": {
|
||||
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
|
||||
"shortName": "cisa-cg",
|
||||
"dateUpdated": "2026-11-13T17:12:17.002Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,139 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-124041",
|
||||
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "cisa-cg",
|
||||
"dateReserved": "2026-11-06T19:43:28.614Z",
|
||||
"datePublished": "2026-11-13T17:11:59.291Z",
|
||||
"dateUpdated": "2026-11-13T17:11:59.291Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Catalis/Patriot Properties WebPro 5.0 allows a remote unauthenticated attacker to execute arbitrary SQL queries against the underlying MSSQL database, enabling exfiltration of sensitive property and taxpayer information."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Catalis",
|
||||
"product": "WebPro",
|
||||
"defaultStatus": "unknown",
|
||||
"versions": [
|
||||
{
|
||||
"version": "5.0",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
|
||||
"lang": "en",
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
|
||||
"integrityImpact": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "LOW"
|
||||
}
|
||||
},
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"baseScore": 6.9,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-06T19:33:16.963894Z",
|
||||
"id": "CVE-2026-124041",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "Catalis WebPro SQL Injection",
|
||||
"references": [
|
||||
{
|
||||
"name": "url",
|
||||
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-310-01.json",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "url",
|
||||
"url": "https://www.cve.org/CVERecord?id=CVE-2026-124041",
|
||||
"tags": [
|
||||
"vdb-entry"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"value": "Logan Diomedi",
|
||||
"lang": "en"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "VINCE-NT 1.15.4+build.174"
|
||||
},
|
||||
"datePublic": "2026-11-13T00:00:00.000Z",
|
||||
"providerMetadata": {
|
||||
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
|
||||
"shortName": "cisa-cg",
|
||||
"dateUpdated": "2026-11-13T17:11:59.291Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-11-06T22:32:02.354Z",
|
||||
"datePublished": "2026-11-13T09:35:16.995Z",
|
||||
"dateUpdated": "2026-11-13T09:35:16.995Z"
|
||||
"dateUpdated": "2026-11-13T16:39:07.701Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -100,6 +100,40 @@
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:38:58.346734Z",
|
||||
"id": "CVE-2026-124218",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:39:07.701Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,308 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-124279",
|
||||
"assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "EEF",
|
||||
"dateReserved": "2026-11-13T11:18:43.141Z",
|
||||
"datePublished": "2026-11-13T16:18:56.700Z",
|
||||
"dateUpdated": "2026-11-13T16:18:56.700Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"collectionURL": "https://repo.hex.pm",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"modules": [
|
||||
"'Elixir.GRPC.Server.Adapters.Cowboy.Handler'",
|
||||
"'Elixir.GRPC.Server.Adapters.Cowboy'"
|
||||
],
|
||||
"packageName": "grpc_server",
|
||||
"packageURL": "pkg:hex/grpc_server",
|
||||
"product": "grpc_server",
|
||||
"programFiles": [
|
||||
"lib/grpc/server/adapters/cowboy/handler.ex",
|
||||
"lib/grpc/server/adapters/cowboy.ex"
|
||||
],
|
||||
"programRoutines": [
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy.Handler':info/3"
|
||||
},
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"
|
||||
}
|
||||
],
|
||||
"repo": "https://github.com/elixir-grpc/grpc",
|
||||
"vendor": "elixir-grpc",
|
||||
"versions": [
|
||||
{
|
||||
"lessThan": "1.1.0",
|
||||
"status": "affected",
|
||||
"version": "1.0.0",
|
||||
"versionType": "semver"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"collectionURL": "https://github.com",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"modules": [
|
||||
"'Elixir.GRPC.Server.Adapters.Cowboy.Handler'",
|
||||
"'Elixir.GRPC.Server.Adapters.Cowboy'"
|
||||
],
|
||||
"packageName": "elixir-grpc/grpc",
|
||||
"packageURL": "pkg:github/elixir-grpc/grpc",
|
||||
"product": "grpc_server",
|
||||
"programFiles": [
|
||||
"grpc_server/lib/grpc/server/adapters/cowboy/handler.ex",
|
||||
"grpc_server/lib/grpc/server/adapters/cowboy.ex"
|
||||
],
|
||||
"programRoutines": [
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy.Handler':info/3"
|
||||
},
|
||||
{
|
||||
"name": "'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"
|
||||
}
|
||||
],
|
||||
"repo": "https://github.com/elixir-grpc/grpc",
|
||||
"vendor": "elixir-grpc",
|
||||
"versions": [
|
||||
{
|
||||
"lessThan": "b1e771d558941b1ed4b6de8b39f6a5375543db01",
|
||||
"status": "affected",
|
||||
"version": "49e18c3ec6bb9afe2f712caad3dbab5c56a68a00",
|
||||
"versionType": "git"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "<p>The server must expose at least one client-streaming or bidirectional-streaming RPC method.</p>"
|
||||
},
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/markdown",
|
||||
"value": "The server must expose at least one client-streaming or bidirectional-streaming RPC method."
|
||||
}
|
||||
],
|
||||
"value": "The server must expose at least one client-streaming or bidirectional-streaming RPC method."
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"cpeMatch": [
|
||||
{
|
||||
"criteria": "cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "1.1.0",
|
||||
"versionStartIncluding": "1.0.0",
|
||||
"vulnerable": true
|
||||
}
|
||||
],
|
||||
"negate": false,
|
||||
"operator": "OR"
|
||||
}
|
||||
],
|
||||
"operator": "AND"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "reporter",
|
||||
"value": "Alfie Goh Li Heng"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "finder",
|
||||
"value": "Alfie Goh Li Heng"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "remediation developer",
|
||||
"value": "Paulo Valente"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "coordinator",
|
||||
"value": "Peter Ullrich"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "coordinator",
|
||||
"value": "Jonatan Männchen / EEF"
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-11-13T11:19:13.000Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "<p>Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attackers to exhaust server memory via client-streaming or bidirectional-streaming requests.</p>\n<p>The streaming read clause of <code>GRPC.Server.Adapters.Cowboy.Handler.info/3</code> (<code>grpc_server/lib/grpc/server/adapters/cowboy/handler.ex</code>) asks Cowboy for up to 8,000,000 bytes per read and compares the running total with <code>max_body_size</code> only after the read returns. The gRPC length prefix of a message is not checked before the message is buffered. Each stream can therefore buffer up to one full read beyond the configured limit before it is refused, and many concurrent streams exhaust node memory. Releases before 1.0.6 apply no limit to streaming requests at all.</p>\n<p>This issue affects grpc_server: from 1.0.0 before 1.1.0.</p>"
|
||||
},
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/markdown",
|
||||
"value": "Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attackers to exhaust server memory via client-streaming or bidirectional-streaming requests.\n\nThe streaming read clause of `GRPC.Server.Adapters.Cowboy.Handler.info/3` (`grpc_server/lib/grpc/server/adapters/cowboy/handler.ex`) asks Cowboy for up to 8,000,000 bytes per read and compares the running total with `max_body_size` only after the read returns. The gRPC length prefix of a message is not checked before the message is buffered. Each stream can therefore buffer up to one full read beyond the configured limit before it is refused, and many concurrent streams exhaust node memory. Releases before 1.0.6 apply no limit to streaming requests at all.\n\nThis issue affects grpc_server: from 1.0.0 before 1.1.0."
|
||||
}
|
||||
],
|
||||
"value": "Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attackers to exhaust server memory via client-streaming or bidirectional-streaming requests.\n\nThe streaming read clause of GRPC.Server.Adapters.Cowboy.Handler.info/3 (grpc_server/lib/grpc/server/adapters/cowboy/handler.ex) asks Cowboy for up to 8,000,000 bytes per read and compares the running total with max_body_size only after the read returns. The gRPC length prefix of a message is not checked before the message is buffered. Each stream can therefore buffer up to one full read beyond the configured limit before it is refused, and many concurrent streams exhaust node memory. Releases before 1.0.6 apply no limit to streaming requests at all.\n\nThis issue affects grpc_server: from 1.0.0 before 1.1.0."
|
||||
}
|
||||
],
|
||||
"impacts": [
|
||||
{
|
||||
"capecId": "CAPEC-130",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "<p>An unauthenticated client that opens many streaming calls can make the server buffer more request data than its configured limit allows and crash the node, taking down every service on it.</p>"
|
||||
},
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/markdown",
|
||||
"value": "An unauthenticated client that opens many streaming calls can make the server buffer more request data than its configured limit allows and crash the node, taking down every service on it."
|
||||
}
|
||||
],
|
||||
"value": "An unauthenticated client that opens many streaming calls can make the server buffer more request data than its configured limit allows and crash the node, taking down every service on it."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"attackVector": "NETWORK",
|
||||
"baseScore": 8.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
|
||||
"version": "4.0",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-770",
|
||||
"description": "CWE-770 Allocation of Resources Without Limits or Throttling",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
|
||||
"shortName": "EEF",
|
||||
"dateUpdated": "2026-11-13T16:18:56.700Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
"name": "Streaming request body limit enforced only after an 8 MB read in elixir-grpc grpc_server",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"related"
|
||||
],
|
||||
"url": "https://github.com/elixir-grpc/grpc/security/advisories/GHSA-736x-r87j-jhcm"
|
||||
},
|
||||
{
|
||||
"name": "EEF CNA record for CVE-2026-124279",
|
||||
"tags": [
|
||||
"related"
|
||||
],
|
||||
"url": "https://cna.erlef.org/cves/CVE-2026-124279.html"
|
||||
},
|
||||
{
|
||||
"name": "OSV record EEF-CVE-2026-124279",
|
||||
"tags": [
|
||||
"related"
|
||||
],
|
||||
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-124279"
|
||||
},
|
||||
{
|
||||
"name": "Introducing commit 49e18c3 in elixir-grpc/grpc",
|
||||
"tags": [
|
||||
"related"
|
||||
],
|
||||
"url": "https://github.com/elixir-grpc/grpc/commit/49e18c3ec6bb9afe2f712caad3dbab5c56a68a00"
|
||||
},
|
||||
{
|
||||
"name": "Fix commit b1e771d in elixir-grpc/grpc",
|
||||
"tags": [
|
||||
"patch"
|
||||
],
|
||||
"url": "https://github.com/elixir-grpc/grpc/commit/b1e771d558941b1ed4b6de8b39f6a5375543db01"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "EXTERNAL"
|
||||
},
|
||||
"title": "Streaming request body limit enforced only after an 8 MB read in elixir-grpc grpc_server",
|
||||
"x_technicalAnalysis": [
|
||||
{
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "<p><strong>1. Large reads</strong></p>\n<p><code>async_read_body/2</code> asks Cowboy for up to 8,000,000 bytes per read on the streaming path, whatever <code>max_body_size</code> is set to.</p>\n<p><strong>2. The limit is checked after the read</strong></p>\n<p><code>track_body_bytes/2</code> adds each returned chunk to a running total and refuses the stream with <code>RESOURCE_EXHAUSTED</code> only once the total exceeds <code>max_body_size</code>. By then the whole chunk is in memory.</p>\n<p><strong>3. No check on the length prefix</strong></p>\n<p>The 5-byte gRPC prefix can declare up to 4 GiB. The server does not compare it with any limit before buffering, so a prefix that declares an oversized message does not stop the read.</p>\n<p><strong>4. Result</strong></p>\n<p>Each client-streaming or bidirectional-streaming call can make the server hold several megabytes more than the configured limit, and the attacker can open many such calls at once. Before 1.0.6 the streaming path had no limit, and <code>GRPC.Server.Adapters.Cowboy.reading_stream/1</code> buffered the whole body.</p>"
|
||||
},
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/markdown",
|
||||
"value": "**1. Large reads**\n\n`async_read_body/2` asks Cowboy for up to 8,000,000 bytes per read on the streaming path, whatever `max_body_size` is set to.\n\n**2. The limit is checked after the read**\n\n`track_body_bytes/2` adds each returned chunk to a running total and refuses the stream with `RESOURCE_EXHAUSTED` only once the total exceeds `max_body_size`. By then the whole chunk is in memory.\n\n**3. No check on the length prefix**\n\nThe 5-byte gRPC prefix can declare up to 4 GiB. The server does not compare it with any limit before buffering, so a prefix that declares an oversized message does not stop the read.\n\n**4. Result**\n\nEach client-streaming or bidirectional-streaming call can make the server hold several megabytes more than the configured limit, and the attacker can open many such calls at once. Before 1.0.6 the streaming path had no limit, and `GRPC.Server.Adapters.Cowboy.reading_stream/1` buffered the whole body."
|
||||
}
|
||||
],
|
||||
"value": "1. Large reads\n\nasync_read_body/2 asks Cowboy for up to 8,000,000 bytes per read on the streaming path, whatever max_body_size is set to.\n\n2. The limit is checked after the read\n\ntrack_body_bytes/2 adds each returned chunk to a running total and refuses the stream with RESOURCE_EXHAUSTED only once the total exceeds max_body_size. By then the whole chunk is in memory.\n\n3. No check on the length prefix\n\nThe 5-byte gRPC prefix can declare up to 4 GiB. The server does not compare it with any limit before buffering, so a prefix that declares an oversized message does not stop the read.\n\n4. Result\n\nEach client-streaming or bidirectional-streaming call can make the server hold several megabytes more than the configured limit, and the attacker can open many such calls at once. Before 1.0.6 the streaming path had no limit, and GRPC.Server.Adapters.Cowboy.reading_stream/1 buffered the whole body."
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-11-09T11:36:29.478Z",
|
||||
"datePublished": "2026-11-11T10:41:07.813Z",
|
||||
"dateUpdated": "2026-11-11T20:27:27.305Z"
|
||||
"dateUpdated": "2026-11-13T17:08:32.241Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -132,6 +132,40 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T17:07:54.166220Z",
|
||||
"id": "CVE-2026-124739",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T17:08:32.241Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-11-09T11:36:29.478Z",
|
||||
"datePublished": "2026-11-11T11:19:56.916Z",
|
||||
"dateUpdated": "2026-11-11T20:27:57.065Z"
|
||||
"dateUpdated": "2026-11-13T17:10:15.378Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -132,6 +132,40 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T17:09:44.810151Z",
|
||||
"id": "CVE-2026-124743",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T17:10:15.378Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "GitHub_M",
|
||||
"dateReserved": "2026-11-09T21:22:55.598Z",
|
||||
"datePublished": "2026-11-10T18:47:10.884Z",
|
||||
"dateUpdated": "2026-11-10T18:47:10.884Z"
|
||||
"dateUpdated": "2026-11-13T16:21:49.236Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -110,6 +110,48 @@
|
||||
"advisory": "GHSA-w4xr-hqv8-ch44",
|
||||
"discovery": "UNKNOWN"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-w4xr-hqv8-ch44",
|
||||
"tags": [
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:19:42.533758Z",
|
||||
"id": "CVE-2026-125332",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "poc"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:21:49.236Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "N-able",
|
||||
"dateReserved": "2026-11-10T12:55:11.705Z",
|
||||
"datePublished": "2026-11-10T21:22:40.630Z",
|
||||
"dateUpdated": "2026-11-10T21:22:40.630Z"
|
||||
"dateUpdated": "2026-11-13T16:40:22.301Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -118,6 +118,40 @@
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.5"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:40:11.426932Z",
|
||||
"id": "CVE-2026-125878",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:40:22.301Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,14 +8,14 @@
|
||||
"assignerShortName": "AMZN",
|
||||
"dateReserved": "2026-11-10T14:18:12.481Z",
|
||||
"datePublished": "2026-11-11T20:50:28.168Z",
|
||||
"dateUpdated": "2026-11-11T20:50:28.168Z"
|
||||
"dateUpdated": "2026-11-13T17:14:36.361Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "ff89ba41-3aa1-4d27-914a-91399e9639e5",
|
||||
"shortName": "AMZN",
|
||||
"dateUpdated": "2026-11-11T20:50:28.168Z"
|
||||
"dateUpdated": "2026-11-13T17:14:36.361Z"
|
||||
},
|
||||
"title": "Server-side request forgery in the server registration and update API in mcp-gateway-registry",
|
||||
"problemTypes": [
|
||||
@@ -101,6 +101,12 @@
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/agentic-community/mcp-gateway-registry/security/advisories/GHSA-fc39-fwh3-wv5r",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "GitHub_M",
|
||||
"dateReserved": "2026-11-10T17:07:43.285Z",
|
||||
"datePublished": "2026-11-10T21:09:33.682Z",
|
||||
"dateUpdated": "2026-11-10T21:09:33.682Z"
|
||||
"dateUpdated": "2026-11-13T16:22:49.039Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -93,6 +93,40 @@
|
||||
"advisory": "GHSA-2gff-2mmg-m73p",
|
||||
"discovery": "UNKNOWN"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:22:35.722742Z",
|
||||
"id": "CVE-2026-126083",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:22:49.039Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,148 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126091",
|
||||
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "cisa-cg",
|
||||
"dateReserved": "2026-11-10T17:35:16.316Z",
|
||||
"datePublished": "2026-11-13T17:11:44.088Z",
|
||||
"dateUpdated": "2026-11-13T17:11:44.088Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Dental practice sites hosted with iDentalSoft send a JSON response to any user who loads certain pages containing sensitive information, including OAuth credentials, password hashes, and PII. Fixed in iDentalSoft 14.0.3."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "iDentalSoft",
|
||||
"product": "iDentalSoft",
|
||||
"defaultStatus": "unknown",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThan": "14.0.3",
|
||||
"versionType": "custom"
|
||||
},
|
||||
{
|
||||
"version": "14.0.3",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"exclusively-hosted-service"
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"description": "CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory",
|
||||
"lang": "en",
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-538"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"baseScore": 8.7,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"vulnConfidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-10-21T19:42:40.462277Z",
|
||||
"id": "CVE-2026-126091",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "iDentalSoft website information exposure",
|
||||
"references": [
|
||||
{
|
||||
"name": "url",
|
||||
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-314-01.json",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "url",
|
||||
"url": "https://www.cve.org/CVERecord?id=CVE-2026-126091",
|
||||
"tags": [
|
||||
"vdb-entry"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"value": "Alex Forman",
|
||||
"lang": "en"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "VINCE-NT 1.15.4+build.174"
|
||||
},
|
||||
"datePublic": "2026-11-11T00:00:00.000Z",
|
||||
"providerMetadata": {
|
||||
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
|
||||
"shortName": "cisa-cg",
|
||||
"dateUpdated": "2026-11-13T17:11:44.088Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "GitHub_M",
|
||||
"dateReserved": "2026-11-10T20:07:44.956Z",
|
||||
"datePublished": "2026-11-10T22:33:57.528Z",
|
||||
"dateUpdated": "2026-11-10T22:33:57.528Z"
|
||||
"dateUpdated": "2026-11-13T16:45:06.845Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -192,6 +192,40 @@
|
||||
"advisory": "GHSA-xqc2-xf4c-x3h3",
|
||||
"discovery": "UNKNOWN"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:44:19.696950Z",
|
||||
"id": "CVE-2026-126187",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:45:06.845Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-10T21:45:21.807Z",
|
||||
"datePublished": "2026-11-11T00:58:48.843Z",
|
||||
"dateUpdated": "2026-11-11T00:58:48.843Z"
|
||||
"dateUpdated": "2026-11-13T16:46:24.477Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -142,6 +142,40 @@
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:46:09.304602Z",
|
||||
"id": "CVE-2026-126495",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "poc"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:46:24.477Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-10T21:45:21.807Z",
|
||||
"datePublished": "2026-11-11T00:58:51.612Z",
|
||||
"dateUpdated": "2026-11-11T00:58:51.612Z"
|
||||
"dateUpdated": "2026-11-13T16:50:29.753Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -154,6 +154,40 @@
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:47:00.596822Z",
|
||||
"id": "CVE-2026-126499",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:50:29.753Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T00:33:10.272Z",
|
||||
"datePublished": "2026-11-11T00:58:54.710Z",
|
||||
"dateUpdated": "2026-11-11T00:58:54.710Z"
|
||||
"dateUpdated": "2026-11-13T16:33:14.549Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -148,6 +148,48 @@
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/security/advisories/GHSA-5gg3-9jhh-xf86",
|
||||
"tags": [
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:32:32.923717Z",
|
||||
"id": "CVE-2026-126543",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "poc"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:33:14.549Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T01:08:18.407Z",
|
||||
"datePublished": "2026-11-11T02:35:56.604Z",
|
||||
"dateUpdated": "2026-11-11T02:35:56.604Z"
|
||||
"dateUpdated": "2026-11-13T16:36:26.477Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -161,6 +161,48 @@
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/SemanticMediaWiki/SemanticMediaWiki/security/advisories/GHSA-cw86-j46r-2x7x",
|
||||
"tags": [
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:34:09.270712Z",
|
||||
"id": "CVE-2026-126559",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "poc"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:36:26.477Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T01:08:19.888Z",
|
||||
"datePublished": "2026-11-11T02:35:59.252Z",
|
||||
"dateUpdated": "2026-11-11T02:35:59.252Z"
|
||||
"dateUpdated": "2026-11-13T16:55:28.697Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -161,6 +161,48 @@
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/SemanticMediaWiki/SemanticMediaWiki/security/advisories/GHSA-h252-mj7p-58q7",
|
||||
"tags": [
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:54:30.647052Z",
|
||||
"id": "CVE-2026-126563",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "poc"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:55:28.697Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T01:43:09.728Z",
|
||||
"datePublished": "2026-11-11T02:36:04.769Z",
|
||||
"dateUpdated": "2026-11-11T02:36:04.769Z"
|
||||
"dateUpdated": "2026-11-13T16:57:41.882Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -167,6 +167,48 @@
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/SemanticMediaWiki/SemanticMediaWiki/security/advisories/GHSA-7j96-w9cc-r7rq",
|
||||
"tags": [
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:57:12.864117Z",
|
||||
"id": "CVE-2026-126567",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "poc"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:57:41.882Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T11:58:21.462Z",
|
||||
"datePublished": "2026-11-11T12:24:35.975Z",
|
||||
"dateUpdated": "2026-11-11T12:24:35.975Z"
|
||||
"dateUpdated": "2026-11-13T17:11:57.941Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -148,6 +148,48 @@
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/jordan-dalby/ByteStash/security/advisories/GHSA-26m9-ww2j-3cr5",
|
||||
"tags": [
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T17:11:13.917901Z",
|
||||
"id": "CVE-2026-126658",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "poc"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T17:11:57.941Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "mongodb",
|
||||
"dateReserved": "2026-11-11T21:29:16.291Z",
|
||||
"datePublished": "2026-11-12T17:06:05.064Z",
|
||||
"dateUpdated": "2026-11-12T17:06:05.064Z"
|
||||
"dateUpdated": "2026-11-13T16:50:44.289Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -127,6 +127,40 @@
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.5"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:50:31.538740Z",
|
||||
"id": "CVE-2026-126835",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:50:44.289Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "mongodb",
|
||||
"dateReserved": "2026-11-11T21:57:44.011Z",
|
||||
"datePublished": "2026-11-12T18:46:40.666Z",
|
||||
"dateUpdated": "2026-11-12T18:46:40.666Z"
|
||||
"dateUpdated": "2026-11-13T16:49:32.949Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -206,6 +206,40 @@
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.5"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:49:22.379896Z",
|
||||
"id": "CVE-2026-126838",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:49:32.949Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Patchstack",
|
||||
"dateReserved": "2026-11-13T08:40:03.311Z",
|
||||
"datePublished": "2026-11-13T12:51:51.572Z",
|
||||
"dateUpdated": "2026-11-13T12:52:52.166Z"
|
||||
"dateUpdated": "2026-11-13T16:44:14.858Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -134,6 +134,40 @@
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:44:04.836510Z",
|
||||
"id": "CVE-2026-128834",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:44:14.858Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,164 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-128986",
|
||||
"assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "eclipse",
|
||||
"dateReserved": "2026-11-13T14:06:21.240Z",
|
||||
"datePublished": "2026-11-13T16:27:04.197Z",
|
||||
"dateUpdated": "2026-11-13T16:27:04.197Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
|
||||
"shortName": "eclipse",
|
||||
"dateUpdated": "2026-11-13T16:27:04.197Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-863",
|
||||
"description": "CWE-863",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-436",
|
||||
"description": "CWE-436",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-177",
|
||||
"description": "CWE-177",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"impacts": [
|
||||
{
|
||||
"capecId": "CAPEC-64",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CAPEC-64"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"capecId": "CAPEC-1",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CAPEC-1"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Eclipse Foundation",
|
||||
"product": "Eclipse BaSyx Go Components",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"lessThan": "1.1.4",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "In Eclipse BaSyx Go Components versions up to and including 1.1.3, ABAC-enabled deployments match `ROUTE` access rules against the fully decoded request path, while the router routes on the raw, still encoded path. An encoded slash (`%2F`) inside a path value is a segment separator for the access check but part of the value for the router, so a request can match a narrow `ROUTE` rule while the handler returns a different, larger resource.\n\n\n\nAn authenticated caller whose rules grant READ only on parts of a resource can therefore read the whole resource. In the DPP API, a rule such as `/v1/dpps/*/elements/*`, meant to grant only passport elements, also grants the complete passport whose identifier contains `/elements/`. In the Submodel Repository, AAS Repository and AAS Environment, a rule such as `/submodels/*/submodel-elements/*/attachment`, meant to grant only file attachments, also grants the complete element whose stored idShort contains `%2F`.\n\n\n\nThe issue is fixed in Eclipse BaSyx Go Components v1.1.4.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "<p>In Eclipse BaSyx Go Components versions up to and including 1.1.3, ABAC-enabled deployments match `ROUTE` access rules against the fully decoded request path, while the router routes on the raw, still encoded path. An encoded slash (`%2F`) inside a path value is a segment separator for the access check but part of the value for the router, so a request can match a narrow `ROUTE` rule while the handler returns a different, larger resource.</p><p>An authenticated caller whose rules grant READ only on parts of a resource can therefore read the whole resource. In the DPP API, a rule such as `/v1/dpps/*/elements/*`, meant to grant only passport elements, also grants the complete passport whose identifier contains `/elements/`. In the Submodel Repository, AAS Repository and AAS Environment, a rule such as `/submodels/*/submodel-elements/*/attachment`, meant to grant only file attachments, also grants the complete element whose stored idShort contains `%2F`.</p><p>The issue is fixed in Eclipse BaSyx Go Components v1.1.4.</p>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/1389"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/eclipse-basyx/basyx-go-components/pull/888"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/eclipse-basyx/basyx-go-components/releases/tag/v1.1.4"
|
||||
},
|
||||
{
|
||||
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/582"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"baseScore": 6,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Christian Koort",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.5"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129116",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:00:58.249Z",
|
||||
"datePublished": "2026-11-13T16:23:48.764Z",
|
||||
"dateUpdated": "2026-11-13T16:23:48.764Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:48.764Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "C-Kermit 7.0.197 before 11.1.515 IKSD Authentication Bypass via Refused Certificate Login",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "C-Kermit from 7.0.197 before 11.1.515 contains an authentication bypass vulnerability in the IKSD SSL build that leaves Telnet authentication state at AUTH_VALID after a refused certificate login. Attackers holding a trusted certificate mapped to a refused account can log in as any other account with any password, gaining that account's shell access."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Authentication",
|
||||
"cweId": "CWE-287",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OpenKermit",
|
||||
"product": "C-Kermit",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "7.0.197",
|
||||
"status": "affected",
|
||||
"lessThan": "11.1.515",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/OpenKermit/ckermit"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 7.7,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/security/advisories/GHSA-5pc4-gh6q-5h4w",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-5pc4-gh6q-5h4w)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/fdfe8f13159f9276d87e02bedba15946b0edda97",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "C-Kermit v11.1.515 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckufio.c#L8249",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: C-Kermit 7.0.197 before 11.1.515 IKSD Authentication Bypass via Refused Certificate Login",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/c-kermit-7.0.197-before-11.1.515-iksd-authentication-bypass-via-refused-certificate-login"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129117",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:00:58.608Z",
|
||||
"datePublished": "2026-11-13T16:23:48.065Z",
|
||||
"dateUpdated": "2026-11-13T16:23:48.065Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:48.065Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "C-Kermit 8.0.200 before 11.1.515 Missing Hostname Verification in AUTHENTICATION SSL",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "C-Kermit 8.0.200 before 11.1.515 contains an improper certificate validation vulnerability that allows machine-in-the-middle attackers to impersonate Telnet servers because ssl_reply() never calls ssl_check_server_name(). Attackers can refuse START-TLS, offer Telnet AUTHENTICATION SSL, and present any trusted CA certificate to capture user credentials and session data."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Validation of Certificate with Host Mismatch",
|
||||
"cweId": "CWE-297",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OpenKermit",
|
||||
"product": "C-Kermit",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.200",
|
||||
"status": "affected",
|
||||
"lessThan": "11.1.515",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/OpenKermit/ckermit"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 7.6,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 6.8,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/security/advisories/GHSA-5pc4-gh6q-5h4w",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-5pc4-gh6q-5h4w)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/0008b429e4fadc8ecfd3d7d661fd55d72e26d527",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "C-Kermit v11.1.515 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/blob/v11.0.514/ck_ssl.c#L3916",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: C-Kermit 8.0.200 before 11.1.515 Missing Hostname Verification in AUTHENTICATION SSL",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/c-kermit-8.0.200-before-11.1.515-missing-hostname-verification-in-authentication-ssl"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129118",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:00:58.945Z",
|
||||
"datePublished": "2026-11-13T16:23:47.381Z",
|
||||
"dateUpdated": "2026-11-13T16:23:47.381Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:47.381Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "C-Kermit 8.0.200 before 11.1.515 Improper Certificate Hostname Matching via dNSName_cmp",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "C-Kermit 8.0.200 before 11.1.515 contains an improper certificate hostname validation vulnerability that allows attackers to impersonate hosts by abusing wildcard matching in dNSName_cmp() in ck_ssl.c. Attackers holding a trusted certificate with over-matching names containing asterisks, question marks, brackets, or empty labels can intercept credentials and data over Telnet, FTP, and HTTP TLS connections."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Validation of Certificate with Host Mismatch",
|
||||
"cweId": "CWE-297",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OpenKermit",
|
||||
"product": "C-Kermit",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.200",
|
||||
"status": "affected",
|
||||
"lessThan": "11.1.515",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/OpenKermit/ckermit"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 7.6,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 6.8,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/security/advisories/GHSA-5pc4-gh6q-5h4w",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-5pc4-gh6q-5h4w)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/8c60a2bd70f5a78e77ce5d140a17e7a9cdcd5e60",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "C-Kermit v11.1.515 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/blob/v11.0.514/ck_ssl.c#L3485",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: C-Kermit 8.0.200 before 11.1.515 Improper Certificate Hostname Matching via dNSName_cmp",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/c-kermit-8.0.200-before-11.1.515-improper-certificate-hostname-matching-via-dnsname-cmp"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129119",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:00:59.324Z",
|
||||
"datePublished": "2026-11-13T16:23:46.712Z",
|
||||
"dateUpdated": "2026-11-13T16:23:46.712Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:46.712Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "C-Kermit 6.0.192 before 11.1.515 File Collision Protection Bypass via RESEND",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "C-Kermit from 6.0.192 before 11.1.515 contains a file collision protection bypass that allows malicious senders to append data to existing files by marking transfers as RESEND. The gattr() function in ckcfn3.c clears the REJECT discard flag and switches to APPEND without a RECEIVE CONFIRM prompt, letting attackers modify files such as shell startup files."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Incorrect Authorization",
|
||||
"cweId": "CWE-863",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OpenKermit",
|
||||
"product": "C-Kermit",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "6.0.192",
|
||||
"status": "affected",
|
||||
"lessThan": "11.1.515",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/OpenKermit/ckermit"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 7.1,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 6.5,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/security/advisories/GHSA-vhrv-7jrq-95qj",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-vhrv-7jrq-95qj)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/bbf9923e3e2e04ac3da713998cb15e786e26fdf1",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "C-Kermit v11.1.515 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckcfn3.c#L1798-L1800",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: C-Kermit 6.0.192 before 11.1.515 File Collision Protection Bypass via RESEND",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/c-kermit-6.0.192-before-11.1.515-file-collision-protection-bypass-via-resend"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129120",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:00:59.683Z",
|
||||
"datePublished": "2026-11-13T16:23:45.983Z",
|
||||
"dateUpdated": "2026-11-13T16:23:45.983Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:45.983Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "C-Kermit 11.0.506 before 11.1.515 RECEIVE CONFIRM Bypass via Recursive GET",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "C-Kermit 11.0.506 before 11.1.515 contains a RECEIVE CONFIRM bypass vulnerability that allows malicious Kermit servers to write unrequested files without prompting by abusing recursive GET root computation in ckcfns.c. Attackers can send files such as .ssh/authorized_keys or shell startup files under the current directory, which rq_under_root() accepts silently, enabling persistent access or code execution."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Incorrect Authorization",
|
||||
"cweId": "CWE-863",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OpenKermit",
|
||||
"product": "C-Kermit",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "11.0.506",
|
||||
"status": "affected",
|
||||
"lessThan": "11.1.515",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/OpenKermit/ckermit"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/security/advisories/GHSA-vhrv-7jrq-95qj",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-vhrv-7jrq-95qj)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/49e04a5ccfa08706b1d7e51dce4059f4adce50f3",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "C-Kermit v11.1.515 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckcfns.c#L3452",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: C-Kermit 11.0.506 before 11.1.515 RECEIVE CONFIRM Bypass via Recursive GET",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/c-kermit-11.0.506-before-11.1.515-receive-confirm-bypass-via-recursive-get"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129121",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:00.061Z",
|
||||
"datePublished": "2026-11-13T16:23:45.325Z",
|
||||
"dateUpdated": "2026-11-13T16:23:45.325Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:45.325Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "C-Kermit 8.0.200 before 11.1.515 Path Traversal via FTP MGET /RECURSIVE",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "C-Kermit 8.0.200 before 11.1.515 contains a path traversal vulnerability in doftpget() in ckcftp.c that allows malicious FTP servers to write files outside the intended directory. Attackers can return absolute paths, tilde names, or dot-dot components in NLST or MLSD listings during MGET /RECURSIVE to overwrite files like .bashrc, leading to code execution."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
|
||||
"cweId": "CWE-22",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OpenKermit",
|
||||
"product": "C-Kermit",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.200",
|
||||
"status": "affected",
|
||||
"lessThan": "11.1.515",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/OpenKermit/ckermit"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 6.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 6.5,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/security/advisories/GHSA-vhrv-7jrq-95qj",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-vhrv-7jrq-95qj)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/9b1809b2ce2bcec08b7285deb1b7f0bcbef6a052",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "C-Kermit v11.1.515 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckcftp.c#L7668",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: C-Kermit 8.0.200 before 11.1.515 Path Traversal via FTP MGET /RECURSIVE",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/c-kermit-8.0.200-before-11.1.515-path-traversal-via-ftp-mget-recursive"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,153 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129122",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:00.441Z",
|
||||
"datePublished": "2026-11-13T16:23:44.625Z",
|
||||
"dateUpdated": "2026-11-13T16:23:44.625Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:44.625Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "C-Kermit 6.0.192 before 11.1.515 Buffer Overflow via Telnet NEW-ENVIRON Negotiation",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "C-Kermit 6.0.192 before 11.1.515 contains a buffer overflow vulnerability in tn_snenv() in ckctel.c that allows malicious Telnet servers to corrupt client memory via crafted NEW-ENVIRON SEND subnegotiation. Malicious or machine-in-the-middle servers can send oversized variable names before authentication, overflowing a 16-byte stack buffer and a miscomputed heap buffer to corrupt stack and heap memory."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Out-of-bounds Write",
|
||||
"cweId": "CWE-787",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OpenKermit",
|
||||
"product": "C-Kermit",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "6.0.192",
|
||||
"status": "affected",
|
||||
"lessThan": "11.1.515",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/OpenKermit/ckermit"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 7.7,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/security/advisories/GHSA-c5px-7h4c-gj8p",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-c5px-7h4c-gj8p)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/39ab009a365b97632e9975e1266fa618c4bdc59f",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/42cf6decb926f56d606a76262791aaf071955d25",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "C-Kermit v11.1.515 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckctel.c#L5622",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: C-Kermit 6.0.192 before 11.1.515 Buffer Overflow via Telnet NEW-ENVIRON Negotiation",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/c-kermit-6.0.192-before-11.1.515-buffer-overflow-via-telnet-new-environ-negotiation"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,153 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129123",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:00.787Z",
|
||||
"datePublished": "2026-11-13T16:23:43.967Z",
|
||||
"dateUpdated": "2026-11-13T16:23:43.967Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:43.967Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "C-Kermit 8.0.200 before 11.1.515 FTP Client Buffer Overflow via PBSZ and ADAT Replies",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "C-Kermit 8.0.200 before 11.1.515 contains a buffer overflow vulnerability in getreply() in ckcftp.c that allows malicious FTP servers to overwrite client memory by sending overlong security replies. Attackers controlling or intercepting an FTP server can send long PBSZ replies after AUTH TLS, or long ADAT replies in GSSAPI, Kerberos 4, and SRP builds, overflowing the static reply_buf with attacker-controlled bytes."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')",
|
||||
"cweId": "CWE-120",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OpenKermit",
|
||||
"product": "C-Kermit",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.200",
|
||||
"status": "affected",
|
||||
"lessThan": "11.1.515",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/OpenKermit/ckermit"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/security/advisories/GHSA-c5px-7h4c-gj8p",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-c5px-7h4c-gj8p)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/39ab009a365b97632e9975e1266fa618c4bdc59f",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/bec28a4d544031fa07a07aacba3df5dd1202ef69",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "C-Kermit v11.1.515 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckcftp.c#L11161",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: C-Kermit 8.0.200 before 11.1.515 FTP Client Buffer Overflow via PBSZ and ADAT Replies",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/c-kermit-8.0.200-before-11.1.515-ftp-client-buffer-overflow-via-pbsz-and-adat-replies"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129124",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:01.143Z",
|
||||
"datePublished": "2026-11-13T16:23:43.321Z",
|
||||
"dateUpdated": "2026-11-13T16:23:43.321Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:43.321Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "C-Kermit before 11.1.515 OS Command Injection via REMOTE WHO and REMOTE SPACE",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "C-Kermit before 11.1.515 contains an OS command injection vulnerability that allows remote clients to execute shell commands by supplying unquoted arguments to REMOTE WHO or REMOTE SPACE. Attackers can append shell metacharacters to arguments passed through WHOCMD or SPACM2 to syscmd(), executing commands on the server host even when DISABLE HOST is set."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
|
||||
"cweId": "CWE-78",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OpenKermit",
|
||||
"product": "C-Kermit",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThan": "11.1.515",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/OpenKermit/ckermit"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 9.2,
|
||||
"baseSeverity": "CRITICAL"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.1,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/security/advisories/GHSA-c5px-7h4c-gj8p",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-c5px-7h4c-gj8p)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/29c4bfbe12d685f93668350c24291e562029ff57",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "C-Kermit v11.1.515 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckcpro.w#L1423",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: C-Kermit before 11.1.515 OS Command Injection via REMOTE WHO and REMOTE SPACE",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/c-kermit-before-11.1.515-os-command-injection-via-remote-who-and-remote-space"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129125",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:01.509Z",
|
||||
"datePublished": "2026-11-13T16:23:42.610Z",
|
||||
"dateUpdated": "2026-11-13T16:23:42.610Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:42.610Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "C-Kermit 6.0.192 before 11.1.515 Command Execution via REMOTE QUERY",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "C-Kermit 6.0.192 before 11.1.515 contains a remote code execution vulnerability that allows Kermit clients to run shell commands on servers with host commands disabled by abusing REMOTE QUERY evaluation. Attackers can send a REMOTE QUERY invoking the command function, or define a macro via REMOTE ASSIGN and call execute to reach RUN, bypassing the nopush restriction and DISABLE HOST."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Incorrect Authorization",
|
||||
"cweId": "CWE-863",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OpenKermit",
|
||||
"product": "C-Kermit",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "6.0.192",
|
||||
"status": "affected",
|
||||
"lessThan": "11.1.515",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/OpenKermit/ckermit"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 9.2,
|
||||
"baseSeverity": "CRITICAL"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.1,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/security/advisories/GHSA-c5px-7h4c-gj8p",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-c5px-7h4c-gj8p)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/85ef1da670cee132ea2d8e4eb759bab310ff73c9",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "C-Kermit v11.1.515 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckcpro.w#L2544",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: C-Kermit 6.0.192 before 11.1.515 Command Execution via REMOTE QUERY",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/c-kermit-6.0.192-before-11.1.515-command-execution-via-remote-query"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129126",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:01.879Z",
|
||||
"datePublished": "2026-11-13T16:23:41.944Z",
|
||||
"dateUpdated": "2026-11-13T16:23:41.944Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:41.944Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "C-Kermit before 11.1.515 Heap Buffer Overflow via putsrv() Packet Decoding",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "C-Kermit before 11.1.515 contains a heap buffer overflow vulnerability in putsrv() in ckcfns.c that allows malicious peers to write past the srvcmd buffer by sending crafted packets. Attackers can use Kermit repeat-count compression in server command, GET, or file-header packets to write attacker-chosen bytes beyond the heap buffer on servers or receiving instances."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Heap-based Buffer Overflow",
|
||||
"cweId": "CWE-122",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OpenKermit",
|
||||
"product": "C-Kermit",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThan": "11.1.515",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/OpenKermit/ckermit"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 9.2,
|
||||
"baseSeverity": "CRITICAL"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.1,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/security/advisories/GHSA-c5px-7h4c-gj8p",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-c5px-7h4c-gj8p)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/commit/37e54720779237897bc6887efac42fe138817897",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "C-Kermit v11.1.515 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckcfns.c#L461",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: C-Kermit before 11.1.515 Heap Buffer Overflow via putsrv() Packet Decoding",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/c-kermit-before-11.1.515-heap-buffer-overflow-via-putsrv-packet-decoding"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Goerzen",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,153 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129127",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:02.227Z",
|
||||
"datePublished": "2026-11-13T16:23:41.139Z",
|
||||
"dateUpdated": "2026-11-13T16:23:41.139Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:41.139Z"
|
||||
},
|
||||
"datePublic": "2026-10-31T00:00:00.000Z",
|
||||
"title": "SQLBot through 1.10.3 Weak Password Hashing via Unsalted MD5",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "SQLBot through 1.10.3 contains a weak password hashing vulnerability that stores local account passwords in sys_user.password as unsalted MD5 digests via md5pwd() in security.py. Attackers who obtain the user table can recover passwords, including administrator passwords, using precomputed tables or GPU cracking, since identical passwords produce identical hashes."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Use of Password Hash With Insufficient Computational Effort",
|
||||
"cweId": "CWE-916",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "dataease",
|
||||
"product": "SQLBot",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "1.10.3",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/dataease/SQLBot"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 4.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/dataease/SQLBot/issues/1432",
|
||||
"tags": [
|
||||
"issue-tracking"
|
||||
],
|
||||
"name": "GitHub Issue #1432"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/dataease/SQLBot",
|
||||
"tags": [
|
||||
"product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/dataease/SQLBot/commit/8b4097f216d0d57e7c82f12ef6b36add1f64e49e",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/dataease/SQLBot/pull/1466",
|
||||
"tags": [
|
||||
"issue-tracking",
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/dataease/SQLBot/blob/96f06c7eade60ecf3e6af0313821373761d1fb85/backend/common/core/security.py#L32-L35",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: SQLBot through 1.10.3 Weak Password Hashing via Unsalted MD5",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/sqlbot-through-1.10.3-weak-password-hashing-via-unsalted-md5"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "George Chen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "fit2cloud-chenyw",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,167 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129128",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:02.592Z",
|
||||
"datePublished": "2026-11-13T16:23:39.517Z",
|
||||
"dateUpdated": "2026-11-13T16:23:39.517Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:39.517Z"
|
||||
},
|
||||
"datePublic": "2026-10-16T00:00:00.000Z",
|
||||
"title": "goose CLI 1.35.0 before 1.53.0 Command Execution via goose review diff.external",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Goose CLI 1.35.0 before 1.53.0 contains a local code execution vulnerability that allows attackers to run commands by setting diff.external in a repository's .git/config. Attackers can ship a crafted repository that, when the victim runs goose review, executes git diff without --no-ext-diff, running commands as the user and exposing credentials and provider API keys."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
|
||||
"cweId": "CWE-78",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "aaif-goose",
|
||||
"product": "goose",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "1.35.0",
|
||||
"status": "affected",
|
||||
"lessThan": "1.53.0",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/aaif-goose/goose"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 8.4,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/aaif-goose/goose/issues/12960",
|
||||
"tags": [
|
||||
"issue-tracking"
|
||||
],
|
||||
"name": "GitHub Issue #12960"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/aaif-goose/goose",
|
||||
"tags": [
|
||||
"product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/aaif-goose/goose/commit/3fbea00fd44f6496ee4afe2b8b2897c3c95d63e9",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/aaif-goose/goose/pull/12537",
|
||||
"tags": [
|
||||
"issue-tracking",
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/aaif-goose/goose/pull/13469",
|
||||
"tags": [
|
||||
"issue-tracking",
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/aaif-goose/goose/releases/tag/v1.53.0",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "goose v1.53.0 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/aaif-goose/goose/blob/302b60806639ea9f0ae8f053f49f8bf0e88b26f4/crates/goose-cli/src/commands/review/handler.rs#L400",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: goose CLI 1.35.0 before 1.53.0 Command Execution via goose review diff.external",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/goose-cli-1.35.0-before-1.53.0-command-execution-via-goose-review-diff-external"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "George Chen",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "sandiyochristan",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,154 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129129",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:02.959Z",
|
||||
"datePublished": "2026-11-13T16:23:38.818Z",
|
||||
"dateUpdated": "2026-11-13T16:23:38.818Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:38.818Z"
|
||||
},
|
||||
"datePublic": "2026-11-12T00:00:00.000Z",
|
||||
"title": "AiSOC 12.1.0 before 23.3.0 Missing Authentication via Enrichment Console Proxy Routes",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "AiSOC 12.1.0 before 23.3.0 contains a missing authentication vulnerability that allows unauthenticated attackers to query the enrichment service through Next.js console rewrite routes. Attackers can send requests to /api/v1/enrichment/lookup or /api/v1/enrichment/bulk to retrieve threat-intelligence results and set force to true to consume commercial provider API quota."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Missing Authentication for Critical Function",
|
||||
"cweId": "CWE-306",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "beenuar",
|
||||
"product": "AiSOC",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "12.1.0",
|
||||
"status": "affected",
|
||||
"versionType": "semver",
|
||||
"lessThan": "23.3.0"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/beenuar/AiSOC"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 6.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 6.5,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-qf6m-hgwv-65f9",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-qf6m-hgwv-65f9)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/beenuar/AiSOC/commit/3a853d16b09a4c59fb4fc3fbe20938bb4c306be7",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/beenuar/AiSOC/pull/1844",
|
||||
"tags": [
|
||||
"issue-tracking",
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/beenuar/AiSOC/releases/tag/v23.3.0",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "AiSOC v23.3.0 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/beenuar/AiSOC/blob/4d8790e21489bffdb33bdbd1ea9ea712899efaf9/apps/web/next.config.js#L305-L310",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: AiSOC 12.1.0 before 23.3.0 Missing Authentication via Enrichment Console Proxy Routes",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/aisoc-12.1.0-before-23.3.0-missing-authentication-via-enrichment-console-proxy-routes"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "naroSEC",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Beenu Arora",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129130",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:03.318Z",
|
||||
"datePublished": "2026-11-13T16:23:38.119Z",
|
||||
"dateUpdated": "2026-11-13T16:23:38.119Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:38.119Z"
|
||||
},
|
||||
"datePublic": "2026-11-13T00:00:00.000Z",
|
||||
"title": "agent-device 0.21.36 Local File Disclosure via file:// Navigation in Open Command",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "agent-device from 0.21.36 before 0.21.37 contains a local file disclosure vulnerability that allows authenticated remote callers to read daemon-host files by opening file:// URLs. Attackers can send an open command with a file:// target through /rpc, then issue snapshot to read any plaintext file readable by the daemon account."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "External Control of File Name or Path",
|
||||
"cweId": "CWE-73",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "callstack",
|
||||
"product": "agent-device",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0.21.36",
|
||||
"status": "affected",
|
||||
"versionType": "semver",
|
||||
"lessThan": "0.21.37"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:npm/agent-device"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 7.1,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 6.5,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/callstack/agent-device/security/advisories/GHSA-g87j-p64h-w8wc",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-g87j-p64h-w8wc)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/callstack/agent-device/commit/2deb909ec88bbbde615ec7c8f3895ef222d8ab3d",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/callstack/agent-device/releases/tag/v0.21.37",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "agent-device v0.21.37 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/callstack/agent-device/blob/ebbaff9a6be75babdb4adcb9074d7522a2773330/packages/daemon/src/server/remote-host-input-policy.ts#L67",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: agent-device 0.21.36 Local File Disclosure via file:// Navigation in Open Command",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/agent-device-0.21.36-local-file-disclosure-via-file-navigation-in-open-command"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "naroSEC",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Michał Pierzchała",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,160 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129131",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:03.677Z",
|
||||
"datePublished": "2026-11-13T16:23:36.890Z",
|
||||
"dateUpdated": "2026-11-13T16:23:36.890Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:36.890Z"
|
||||
},
|
||||
"datePublic": "2026-11-12T00:00:00.000Z",
|
||||
"title": "Gameyfin before 2.6.2 Missing Authorization in Hilla Endpoints",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Gameyfin before 2.6.2 contains a missing authorization vulnerability that allows unauthenticated attackers to bypass login-required mode by calling Hilla endpoints annotated with @AnonymousAllowed. Attackers can POST to synchronous endpoint methods such as GameEndpoint.sync, which LiveSubscriptionSecurity never checks, to retrieve game catalog metadata, libraries, platforms, plugins and game requests."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Missing Authorization",
|
||||
"cweId": "CWE-862",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "gameyfin",
|
||||
"product": "gameyfin",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThan": "2.6.2",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/gameyfin/gameyfin"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 6.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/gameyfin/gameyfin/issues/1017",
|
||||
"tags": [
|
||||
"issue-tracking"
|
||||
],
|
||||
"name": "GitHub Issue #1017"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/gameyfin/gameyfin",
|
||||
"tags": [
|
||||
"product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/gameyfin/gameyfin/commit/2515f1693c88bfa8145882fd85b790638738032c",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/gameyfin/gameyfin/pull/1018",
|
||||
"tags": [
|
||||
"issue-tracking",
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/gameyfin/gameyfin/releases/tag/v2.6.2",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "gameyfin v2.6.2 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/gameyfin/gameyfin/blob/1ec9d627228bb77cf2485e259a58d37afa98f2b7/app/src/main/kotlin/org/gameyfin/app/core/security/LiveSubscriptionSecurity.kt#L22",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: Gameyfin before 2.6.2 Missing Authorization in Hilla Endpoints",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/gameyfin-before-2.6.2-missing-authorization-in-hilla-endpoints"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "hieuPenguinnn",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "grimsi",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129132",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:04.040Z",
|
||||
"datePublished": "2026-11-13T16:23:36.193Z",
|
||||
"dateUpdated": "2026-11-13T16:23:36.193Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:36.193Z"
|
||||
},
|
||||
"datePublic": "2026-11-12T00:00:00.000Z",
|
||||
"title": "MRBS before 1.13.0 LDAP Injection via AuthLdap.php Authentication Filter",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "MRBS before 1.13.0 contains an LDAP injection vulnerability in web/lib/MRBS/Auth/AuthLdap.php that interpolates unescaped login usernames into DN search and group-membership filters. Attackers with valid directory credentials outside the required group can submit crafted usernames that make the group filter always true, bypassing access restrictions."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')",
|
||||
"cweId": "CWE-90",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "meeting-room-booking-system",
|
||||
"product": "mrbs-code",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThan": "1.13.0",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/meeting-room-booking-system/mrbs-code"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 2.3,
|
||||
"baseSeverity": "LOW"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 4.2,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/security/advisories/GHSA-r543-f38c-cq6v",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-r543-f38c-cq6v)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/commit/92f6f5610072ddb9e1b38074c410fc8be56947ed",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/releases/tag/v1.13.0",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "mrbs-code v1.13.0 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/blob/299686ed64174a66448699f5ca0fb5e0e0ea9faa/web/lib/MRBS/Auth/AuthLdap.php#L749",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: MRBS before 1.13.0 LDAP Injection via AuthLdap.php Authentication Filter",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/mrbs-before-1.13.0-ldap-injection-via-authldap-php-authentication-filter"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "leediay153 from Viettel Post",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Beranek",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129133",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:04.407Z",
|
||||
"datePublished": "2026-11-13T16:23:35.501Z",
|
||||
"dateUpdated": "2026-11-13T16:23:35.501Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:35.501Z"
|
||||
},
|
||||
"datePublic": "2026-11-12T00:00:00.000Z",
|
||||
"title": "MRBS before 1.13.0 CSV Formula Injection via Report Export",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "MRBS before 1.13.0 contains a CSV formula injection vulnerability that allows authenticated users to inject spreadsheet formulas because the escape() function in web/report.php fails to neutralize leading formula characters. Attackers can store formulas in booking names, descriptions or custom fields that execute when privileged users open exported CSV reports, enabling data exfiltration or command execution via DDE."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Neutralization of Formula Elements in a CSV File",
|
||||
"cweId": "CWE-1236",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "meeting-room-booking-system",
|
||||
"product": "mrbs-code",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThan": "1.13.0",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/meeting-room-booking-system/mrbs-code"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.1,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/security/advisories/GHSA-9rvp-v4ff-wpwr",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-9rvp-v4ff-wpwr)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/commit/92f6f5610072ddb9e1b38074c410fc8be56947ed",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/releases/tag/v1.13.0",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "mrbs-code v1.13.0 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/blob/299686ed64174a66448699f5ca0fb5e0e0ea9faa/web/report.php#L542-L543",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: MRBS before 1.13.0 CSV Formula Injection via Report Export",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/mrbs-before-1.13.0-csv-formula-injection-via-report-export"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "leediay153 from Viettel Post",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Beranek",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129134",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:04.767Z",
|
||||
"datePublished": "2026-11-13T16:23:34.805Z",
|
||||
"dateUpdated": "2026-11-13T16:23:34.805Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:34.805Z"
|
||||
},
|
||||
"datePublic": "2026-11-12T00:00:00.000Z",
|
||||
"title": "MRBS before 1.13.0 Password Reset Poisoning via Host Header Injection",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "MRBS before 1.13.0 contains a password reset poisoning vulnerability that allows unauthenticated attackers to redirect reset links by forging the Host header when $url_base is unset. Attackers can request a reset for a victim so AuthDb::notifyUser() emails a link pointing to their host, capturing the reset key when opened to take over accounts including administrators."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Weak Password Recovery Mechanism for Forgotten Password",
|
||||
"cweId": "CWE-640",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "meeting-room-booking-system",
|
||||
"product": "mrbs-code",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThan": "1.13.0",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/meeting-room-booking-system/mrbs-code"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 8.6,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 8.1,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/security/advisories/GHSA-73cv-hx7f-9v27",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-73cv-hx7f-9v27)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/commit/92f6f5610072ddb9e1b38074c410fc8be56947ed",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/releases/tag/v1.13.0",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "mrbs-code v1.13.0 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/meeting-room-booking-system/mrbs-code/blob/299686ed64174a66448699f5ca0fb5e0e0ea9faa/web/lib/MRBS/Auth/AuthDb.php#L613",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: MRBS before 1.13.0 Password Reset Poisoning via Host Header Injection",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/mrbs-before-1.13.0-password-reset-poisoning-via-host-header-injection"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "leediay153 from Viettel Post",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "John Beranek",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,177 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129135",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-13T16:01:05.142Z",
|
||||
"datePublished": "2026-11-13T16:23:34.108Z",
|
||||
"dateUpdated": "2026-11-13T16:23:34.108Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:23:34.108Z"
|
||||
},
|
||||
"datePublic": "2026-11-12T00:00:00.000Z",
|
||||
"title": "picoquic before 2026.11.05.3e2e3d3 Integer Overflow via TIME_STAMP Frame Decoder",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "picoquic before 2026.11.05.3e2e3d3 contains an integer overflow vulnerability in picoquic_decode_time_stamp_frame() that allows remote QUIC peers to corrupt stored timestamps by sending oversized TIME_STAMP values. Attackers on connections negotiating the TIME_STAMP extension can send large values shifted by ack_delay_exponent to wrap the result, corrupting RTT and bandwidth estimation and degrading congestion control."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Integer Overflow or Wraparound",
|
||||
"cweId": "CWE-190",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "private-octopus",
|
||||
"product": "picoquic",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThan": "2026.11.05.3e2e3d3",
|
||||
"versionType": "custom"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/private-octopus/picoquic"
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:privateoctopus:picoquic:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "2026.11.05.3e2e3d3"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 6.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 3.7,
|
||||
"baseSeverity": "LOW"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/private-octopus/picoquic/issues/2365",
|
||||
"tags": [
|
||||
"issue-tracking"
|
||||
],
|
||||
"name": "GitHub Issue #2365"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/private-octopus/picoquic",
|
||||
"tags": [
|
||||
"product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/private-octopus/picoquic/commit/ef21278928771a1ace1c6764cf0e5300d61f7d94",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/private-octopus/picoquic/pull/2343",
|
||||
"tags": [
|
||||
"issue-tracking",
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/private-octopus/picoquic/releases/tag/v2026.11.05.3e2e3d3",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "picoquic v2026.11.05.3e2e3d3 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/private-octopus/picoquic/blob/7966b3f6a5f1dc08a844b3bfa0b22b0f8d424736/picoquic/frames.c#L5651",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: picoquic before 2026.11.05.3e2e3d3 Integer Overflow via TIME_STAMP Frame Decoder",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/picoquic-before-2026.11.05-3e2e3d3-integer-overflow-via-time-stamp-frame-decoder"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Tristan Madani (Talence Security)",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Christian Huitema",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,14 +8,14 @@
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-07-10T16:20:53.214Z",
|
||||
"datePublished": "2026-07-25T06:50:05.480Z",
|
||||
"dateUpdated": "2026-07-27T14:36:44.294Z"
|
||||
"dateUpdated": "2026-11-13T16:46:41.894Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"shortName": "Wordfence",
|
||||
"dateUpdated": "2026-07-25T06:50:05.480Z"
|
||||
"dateUpdated": "2026-11-13T16:46:41.894Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
@@ -60,6 +60,9 @@
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/changeset?old_path=%2Fwordpress-seo/tags/28.0&new_path=%2Fwordpress-seo/tags/28.1"
|
||||
},
|
||||
{
|
||||
"url": "https://research.cleantalk.org/cve-2026-15425"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
@@ -67,7 +70,7 @@
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
|
||||
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation",
|
||||
"cweId": "CWE-79",
|
||||
"type": "CWE"
|
||||
}
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-02-12T12:07:02.132Z",
|
||||
"datePublished": "2026-11-10T20:10:39.645Z",
|
||||
"dateUpdated": "2026-11-11T03:55:44.333Z"
|
||||
"dateUpdated": "2026-11-13T16:42:07.837Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -152,6 +152,40 @@
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-142"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:41:54.444469Z",
|
||||
"id": "CVE-2026-26248",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:42:07.837Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-04-29T15:09:53.696Z",
|
||||
"datePublished": "2026-09-16T16:56:11.638Z",
|
||||
"dateUpdated": "2026-11-12T23:55:50.003Z"
|
||||
"dateUpdated": "2026-11-13T16:56:28.636Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -334,6 +334,46 @@
|
||||
"cpe:/a:redhat:satellite_utils:6.18::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "python3.12-pysequoia",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:0.1.35-1.el9pc",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "python3.12-pysequoia",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:0.1.35-1.el9pc",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Cost Management On-Premise 1",
|
||||
@@ -530,6 +570,14 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:100120",
|
||||
"name": "RHSA-2026:100120",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:34160",
|
||||
"name": "RHSA-2026:34160",
|
||||
@@ -685,7 +733,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-12T23:55:50.003Z"
|
||||
"dateUpdated": "2026-11-13T16:56:28.636Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "GitHub_M",
|
||||
"dateReserved": "2026-05-15T21:46:51.547Z",
|
||||
"datePublished": "2026-11-12T20:01:13.815Z",
|
||||
"dateUpdated": "2026-11-12T20:01:13.815Z"
|
||||
"dateUpdated": "2026-11-13T16:27:59.949Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -100,6 +100,40 @@
|
||||
"advisory": "GHSA-rv5h-cxwq-q3mh",
|
||||
"discovery": "UNKNOWN"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T15:28:43.238155Z",
|
||||
"id": "CVE-2026-46677",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T16:27:59.949Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,14 +8,14 @@
|
||||
"assignerShortName": "VulDB",
|
||||
"dateReserved": "2026-03-18T15:05:58.566Z",
|
||||
"datePublished": "2026-05-27T16:45:07.874Z",
|
||||
"dateUpdated": "2026-05-27T18:46:24.200Z"
|
||||
"dateUpdated": "2026-11-13T17:14:23.184Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
|
||||
"shortName": "VulDB",
|
||||
"dateUpdated": "2026-05-27T16:45:07.874Z"
|
||||
"dateUpdated": "2026-11-13T17:14:23.184Z"
|
||||
},
|
||||
"title": "TeamSpeak 3 Server ECC Key heap-based overflow",
|
||||
"problemTypes": [
|
||||
@@ -79,6 +79,10 @@
|
||||
},
|
||||
{
|
||||
"version": "3.13.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "3.13.9",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
@@ -93,7 +97,7 @@
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A security vulnerability has been detected in TeamSpeak 3 Server up to 3.13.7. This vulnerability affects unknown code of the component ECC Key Parser. Such manipulation leads to heap-based buffer overflow. The attack may be launched remotely. Upgrading to version 3.13.8 is able to resolve this issue. It is suggested to upgrade the affected component."
|
||||
"value": "A security vulnerability has been detected in TeamSpeak 3 Server up to 3.13.8. This vulnerability affects unknown code of the component ECC Key Parser. Such manipulation leads to heap-based buffer overflow. The attack may be launched remotely. Upgrading to version 3.13.9 is able to resolve this issue. It is suggested to upgrade the affected component. The vendor explains: \"We have just released TeamSpeak 3 Server 3.13.9 to address a remaining variant of CVE-2026-4391, affecting ECC key parsing during the connection handshake. The original fix released with 3.13.8 did not cover this additional variant, which could allow an unauthenticated remote attacker to crash the server using specially crafted input.\""
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
@@ -141,7 +145,7 @@
|
||||
"value": "VulDB entry created"
|
||||
},
|
||||
{
|
||||
"time": "2026-05-27T18:26:06.000Z",
|
||||
"time": "2026-11-13T18:18:44.000Z",
|
||||
"lang": "en",
|
||||
"value": "VulDB entry last update"
|
||||
}
|
||||
@@ -151,6 +155,11 @@
|
||||
"lang": "en",
|
||||
"value": "Michael Imfeld (modzero)",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "VulDB CNA Team",
|
||||
"type": "coordinator"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
@@ -169,6 +178,13 @@
|
||||
"permissions-required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/cve/CVE-2026-4391",
|
||||
"name": "CVE-2026-4391 | CVE Analysis and Report",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://modzero.com/en/advisories/mz-26-01-teamspeak/",
|
||||
"tags": [
|
||||
@@ -186,7 +202,16 @@
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://community.teamspeak.com/t/teamspeak-3-server-3-13-9-security-update/65759",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
}
|
||||
],
|
||||
"x_generator": [
|
||||
"VulDB PVTS v202611"
|
||||
]
|
||||
},
|
||||
"adp": [
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-06-16T17:48:40.351Z",
|
||||
"datePublished": "2026-11-10T19:20:17.484Z",
|
||||
"dateUpdated": "2026-11-13T05:02:15.678Z"
|
||||
"dateUpdated": "2026-11-13T16:22:35.493Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -57,13 +57,41 @@
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-693",
|
||||
"lang": "en",
|
||||
"description": "CWE-693 Protection Mechanism Failure"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 8.4,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T00:00:00+00:00",
|
||||
"timestamp": "2026-11-13T05:02:16.545013Z",
|
||||
"id": "CVE-2026-55309",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
@@ -76,16 +104,16 @@
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3",
|
||||
"id": "CVE-2026-55309"
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T05:02:15.678Z"
|
||||
"dateUpdated": "2026-11-13T16:22:35.493Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-06-23T16:10:45.837Z",
|
||||
"datePublished": "2026-11-10T19:20:39.078Z",
|
||||
"dateUpdated": "2026-11-13T05:01:54.734Z"
|
||||
"dateUpdated": "2026-11-13T16:22:46.376Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -57,13 +57,41 @@
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-441",
|
||||
"lang": "en",
|
||||
"description": "CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 8.4,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T00:00:00+00:00",
|
||||
"timestamp": "2026-11-13T05:01:55.531427Z",
|
||||
"id": "CVE-2026-56926",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
@@ -76,16 +104,16 @@
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3",
|
||||
"id": "CVE-2026-56926"
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T05:01:54.734Z"
|
||||
"dateUpdated": "2026-11-13T16:22:46.376Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-06-23T16:25:16.340Z",
|
||||
"datePublished": "2026-11-10T19:21:01.446Z",
|
||||
"dateUpdated": "2026-11-13T05:01:16.845Z"
|
||||
"dateUpdated": "2026-11-13T16:22:55.351Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -57,13 +57,41 @@
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-441",
|
||||
"lang": "en",
|
||||
"description": "CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 8.8,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T00:00:00+00:00",
|
||||
"timestamp": "2026-11-13T05:01:17.626247Z",
|
||||
"id": "CVE-2026-57005",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
@@ -76,16 +104,16 @@
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3",
|
||||
"id": "CVE-2026-57005"
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T05:01:16.845Z"
|
||||
"dateUpdated": "2026-11-13T16:22:55.351Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-02T05:42:12.104Z",
|
||||
"datePublished": "2026-11-10T19:21:22.792Z",
|
||||
"dateUpdated": "2026-11-13T05:00:46.989Z"
|
||||
"dateUpdated": "2026-11-13T16:23:05.087Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -57,13 +57,41 @@
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-190",
|
||||
"lang": "en",
|
||||
"description": "CWE-190 Integer Overflow or Wraparound"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.8,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T00:00:00+00:00",
|
||||
"timestamp": "2026-11-13T05:00:48.104506Z",
|
||||
"id": "CVE-2026-58740",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
@@ -76,16 +104,16 @@
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3",
|
||||
"id": "CVE-2026-58740"
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T05:00:46.989Z"
|
||||
"dateUpdated": "2026-11-13T16:23:05.087Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-02T05:52:23.114Z",
|
||||
"datePublished": "2026-11-10T19:21:47.762Z",
|
||||
"dateUpdated": "2026-11-13T05:01:48.981Z"
|
||||
"dateUpdated": "2026-11-13T16:27:13.328Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -57,13 +57,41 @@
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-119",
|
||||
"lang": "en",
|
||||
"description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.7,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T00:00:00+00:00",
|
||||
"timestamp": "2026-11-13T05:01:49.744288Z",
|
||||
"id": "CVE-2026-58805",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
@@ -76,16 +104,16 @@
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3",
|
||||
"id": "CVE-2026-58805"
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T05:01:48.981Z"
|
||||
"dateUpdated": "2026-11-13T16:27:13.328Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "GitHub_M",
|
||||
"dateReserved": "2026-07-02T19:53:48.831Z",
|
||||
"datePublished": "2026-11-11T04:22:38.885Z",
|
||||
"dateUpdated": "2026-11-11T04:22:38.885Z"
|
||||
"dateUpdated": "2026-11-13T17:07:23.729Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -121,6 +121,40 @@
|
||||
"advisory": "GHSA-48qj-5wxh-m8hc",
|
||||
"discovery": "UNKNOWN"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T17:06:54.424216Z",
|
||||
"id": "CVE-2026-59192",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T17:07:23.729Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-06T06:30:47.247Z",
|
||||
"datePublished": "2026-11-10T19:22:34.132Z",
|
||||
"dateUpdated": "2026-11-13T05:01:46.742Z"
|
||||
"dateUpdated": "2026-11-13T16:27:23.143Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -57,13 +57,41 @@
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-693",
|
||||
"lang": "en",
|
||||
"description": "CWE-693 Protection Mechanism Failure"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 8.4,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T00:00:00+00:00",
|
||||
"timestamp": "2026-11-13T05:01:47.573309Z",
|
||||
"id": "CVE-2026-59630",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
@@ -76,16 +104,16 @@
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3",
|
||||
"id": "CVE-2026-59630"
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T05:01:46.742Z"
|
||||
"dateUpdated": "2026-11-13T16:27:23.143Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "GitHub_M",
|
||||
"dateReserved": "2026-07-10T20:17:57.991Z",
|
||||
"datePublished": "2026-11-11T04:16:28.714Z",
|
||||
"dateUpdated": "2026-11-11T04:16:28.714Z"
|
||||
"dateUpdated": "2026-11-13T17:05:45.161Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -89,6 +89,40 @@
|
||||
"advisory": "GHSA-chjj-xvqx-c8w4",
|
||||
"discovery": "UNKNOWN"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T17:04:51.007611Z",
|
||||
"id": "CVE-2026-61810",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T17:05:45.161Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,16 +8,15 @@
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.184Z",
|
||||
"datePublished": "2026-10-13T19:36:31.029Z",
|
||||
"dateUpdated": "2026-11-08T14:07:39.633Z"
|
||||
"dateUpdated": "2026-11-13T17:13:33.574Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-08T14:07:39.633Z"
|
||||
"dateUpdated": "2026-11-13T17:13:33.574Z"
|
||||
},
|
||||
"datePublic": "2026-10-01T00:00:00.000Z",
|
||||
"title": "Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php",
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -28,13 +27,14 @@
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-10-01T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-94",
|
||||
"description": "Improper Control of Generation of Code ('Code Injection')",
|
||||
"cweId": "CWE-94",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
@@ -62,7 +62,6 @@
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
@@ -154,6 +153,13 @@
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63146-unauthenticated-rce-at-installation",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
@@ -168,9 +174,6 @@
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
|
||||
@@ -8,16 +8,15 @@
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.185Z",
|
||||
"datePublished": "2026-10-13T19:59:44.084Z",
|
||||
"dateUpdated": "2026-11-08T14:07:40.312Z"
|
||||
"dateUpdated": "2026-11-13T17:14:01.979Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-08T14:07:40.312Z"
|
||||
"dateUpdated": "2026-11-13T17:14:01.979Z"
|
||||
},
|
||||
"datePublic": "2026-10-01T00:00:00.000Z",
|
||||
"title": "Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name",
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -28,13 +27,14 @@
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-10-01T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-79",
|
||||
"description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
|
||||
"cweId": "CWE-79",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
@@ -62,7 +62,6 @@
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
@@ -154,6 +153,13 @@
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63147-stored-xss-via-uploaded-file-name",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
@@ -168,9 +174,6 @@
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
|
||||
@@ -8,16 +8,15 @@
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.185Z",
|
||||
"datePublished": "2026-10-13T20:00:23.928Z",
|
||||
"dateUpdated": "2026-11-08T14:07:41.045Z"
|
||||
"dateUpdated": "2026-11-13T17:14:25.865Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-08T14:07:41.045Z"
|
||||
"dateUpdated": "2026-11-13T17:14:25.865Z"
|
||||
},
|
||||
"datePublic": "2026-10-01T00:00:00.000Z",
|
||||
"title": "Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename",
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -28,13 +27,14 @@
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-10-01T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-79",
|
||||
"description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
|
||||
"cweId": "CWE-79",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
@@ -62,7 +62,6 @@
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
@@ -154,6 +153,13 @@
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63148-stored-xss-via-poll-response-attachment-filename",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
@@ -168,9 +174,6 @@
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
|
||||
@@ -8,16 +8,15 @@
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.185Z",
|
||||
"datePublished": "2026-10-13T19:40:43.053Z",
|
||||
"dateUpdated": "2026-11-08T14:07:41.737Z"
|
||||
"dateUpdated": "2026-11-13T17:14:53.630Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-08T14:07:41.737Z"
|
||||
"dateUpdated": "2026-11-13T17:14:53.630Z"
|
||||
},
|
||||
"datePublic": "2026-10-01T00:00:00.000Z",
|
||||
"title": "Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()",
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -28,13 +27,14 @@
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-10-01T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-330",
|
||||
"description": "Use of Insufficiently Random Values",
|
||||
"cweId": "CWE-330",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
@@ -62,7 +62,6 @@
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
@@ -154,6 +153,13 @@
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63149-predictable-default-password-via-uniqid",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
@@ -168,9 +174,6 @@
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
|
||||
@@ -0,0 +1,162 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-63150",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.185Z",
|
||||
"datePublished": "2026-11-13T16:44:10.521Z",
|
||||
"dateUpdated": "2026-11-13T16:44:10.521Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:44:10.521Z"
|
||||
},
|
||||
"title": "Omnispace Agora Project 26.10.0 CSRF via Administrator Account Creation",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Omnispace Agora Project through 26.10.0 contains a cross-site request forgery vulnerability that allows remote attackers to forge privileged actions such as administrator user creation by merging $_GET and $_POST parameters without requiring an anti-CSRF token. Attackers can craft a malicious link or auto-navigating page that issues a plain GET request, exploiting the lack of CSRF protection and SameSite=Lax cookie behavior on top-level navigations to create unauthorized administrator accounts."
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-11-13T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Cross-Site Request Forgery (CSRF)",
|
||||
"cweId": "CWE-352",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "unaffected",
|
||||
"vendor": "Omnispace",
|
||||
"product": "Agora Project",
|
||||
"packageURL": "pkg:github/xech/agora-project",
|
||||
"repo": "https://github.com/xech/agora-project",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:agora-project:agora-project:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 8.6,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"version": "3.1",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 8.1,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63150-no-csrf-protection-and-unsecure-cookies-leads-to-administrator-cr",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description",
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Geoffrey Robert of akailabs",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Valentin Holubec of akailabs",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,162 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-63151",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.185Z",
|
||||
"datePublished": "2026-11-13T16:59:10.603Z",
|
||||
"dateUpdated": "2026-11-13T16:59:10.603Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T16:59:10.603Z"
|
||||
},
|
||||
"title": "Omnispace Agora Project 26.10.0 Predictable Token Information Disclosure via DisplayIcal",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to access private calendar data by exploiting a missing dateCrea value that causes the md5Id token to collapse to md5(calendarId.userId), both small enumerable integers. Attackers can compute valid tokens and request the misc&action=DisplayIcal endpoint with a forged md5Id to read any user's private calendar events without authentication."
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-11-13T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Use of Insufficiently Random Values",
|
||||
"cweId": "CWE-330",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "unaffected",
|
||||
"vendor": "Omnispace",
|
||||
"product": "Agora Project",
|
||||
"packageURL": "pkg:github/xech/agora-project",
|
||||
"repo": "https://github.com/xech/agora-project",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:agora-project:agora-project:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 8.7,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE",
|
||||
"version": "3.1",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63151-personal-calendars-zero-entropy-md5id-share-token-allows-unauthen",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description",
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Geoffrey Robert of akailabs",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Valentin Holubec of akailabs",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,162 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-63155",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.185Z",
|
||||
"datePublished": "2026-11-13T17:01:15.559Z",
|
||||
"dateUpdated": "2026-11-13T17:01:15.559Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T17:01:15.559Z"
|
||||
},
|
||||
"title": "Omnispace Agora Project 26.10.0 Open Redirect via objUrl Parameter",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Omnispace Agora Project through 26.10.0 contains an open redirect vulnerability that allows remote attackers to redirect users to arbitrary external URLs by manipulating the objUrl parameter in Ctrl.php's redir() function. Attackers can craft login links with objUrl set to a malicious site, causing the application to issue an HTTP 302 redirect to that external URL, which can be abused for phishing and credential theft."
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-11-13T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "URL Redirection to Untrusted Site ('Open Redirect')",
|
||||
"cweId": "CWE-601",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "unaffected",
|
||||
"vendor": "Omnispace",
|
||||
"product": "Agora Project",
|
||||
"packageURL": "pkg:github/xech/agora-project",
|
||||
"repo": "https://github.com/xech/agora-project",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:agora-project:agora-project:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"baseScore": 5.3,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"version": "3.1",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"baseScore": 6.1,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63155-open-redirect-and-reflected-xss-via-objurl",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description",
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Geoffrey Robert of akailabs",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Valentin Holubec of akailabs",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,162 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-63164",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.186Z",
|
||||
"datePublished": "2026-11-13T17:02:42.943Z",
|
||||
"dateUpdated": "2026-11-13T17:02:42.943Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T17:02:42.943Z"
|
||||
},
|
||||
"title": "Omnispace Agora Project 26.10.0 IDOR via reloadMailTypeId Parameter",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Omnispace Agora Project through 26.10.0 contains an insecure direct object reference vulnerability that allows authenticated attackers to access another user's private mail by supplying a crafted reloadMailTypeId parameter to Ctrl::getCurObj() without a readRight() ownership check in CtrlMail.php. Attackers can manipulate the mail identifier value, such as reloadMailTypeId=mail-1, to retrieve the title and body of private messages belonging to other users, resulting in unauthorized disclosure of sensitive communications."
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-11-13T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Authorization Bypass Through User-Controlled Key",
|
||||
"cweId": "CWE-639",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "unaffected",
|
||||
"vendor": "Omnispace",
|
||||
"product": "Agora Project",
|
||||
"packageURL": "pkg:github/xech/agora-project",
|
||||
"repo": "https://github.com/xech/agora-project",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:agora-project:agora-project:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 7.1,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE",
|
||||
"version": "3.1",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"baseScore": 6.5,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63164-idor-in-reloadmailtypeid-allows-reading-and-exfiltration-of-other",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description",
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Geoffrey Robert of akailabs",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Valentin Holubec of akailabs",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,162 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-63166",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.186Z",
|
||||
"datePublished": "2026-11-13T17:04:06.478Z",
|
||||
"dateUpdated": "2026-11-13T17:04:06.478Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T17:04:06.478Z"
|
||||
},
|
||||
"title": "Omnispace Agora Project 26.10.0 Stored XSS via CSV Import Preview",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Omnispace Agora Project through 26.10.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious HTML markup by controlling imported directory data or an uploaded CSV file, as values are rendered into table cell text and value attributes after only Txt::utf8Encode() with no HTML escaping in VuePersonsImportExport.php. Attackers can craft a CSV cell containing an attribute-breakout payload that is rendered verbatim and executed in the browser of the administrator performing the import, leading to arbitrary script execution in the administrative context."
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-11-13T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
|
||||
"cweId": "CWE-79",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "unaffected",
|
||||
"vendor": "Omnispace",
|
||||
"product": "Agora Project",
|
||||
"packageURL": "pkg:github/xech/agora-project",
|
||||
"repo": "https://github.com/xech/agora-project",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:agora-project:agora-project:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"baseScore": 5.3,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"version": "3.1",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"baseScore": 6.1,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63166-second-order-xss-in-ldap-import-preview",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description",
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Geoffrey Robert of akailabs",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Valentin Holubec of akailabs",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,162 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-63167",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.186Z",
|
||||
"datePublished": "2026-11-13T17:05:41.678Z",
|
||||
"dateUpdated": "2026-11-13T17:05:41.678Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T17:05:41.678Z"
|
||||
},
|
||||
"title": "Omnispace Agora Project 26.10.0 SQL Injection via personsSort Session Value",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Omnispace Agora Project through 26.10.0 contains a SQL injection vulnerability that allows authenticated general administrators to inject arbitrary SQL by setting the personsSort session value, which is concatenated unsanitized into ORDER BY clauses in MdlUser.php and MdlSpace.php. Attackers can submit an error-based extractvalue payload through personsSort to leak database information, such as the MariaDB version, via the user and space listing pages."
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-11-13T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
|
||||
"cweId": "CWE-89",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "unaffected",
|
||||
"vendor": "Omnispace",
|
||||
"product": "Agora Project",
|
||||
"packageURL": "pkg:github/xech/agora-project",
|
||||
"repo": "https://github.com/xech/agora-project",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:agora-project:agora-project:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 8.5,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"version": "3.1",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"baseScore": 6.5,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63167-second-order-sql-injection-order-by-via-personssort",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description",
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Geoffrey Robert of akailabs",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Valentin Holubec of akailabs",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,162 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-63170",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.186Z",
|
||||
"datePublished": "2026-11-13T17:07:10.694Z",
|
||||
"dateUpdated": "2026-11-13T17:07:10.694Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T17:07:10.694Z"
|
||||
},
|
||||
"title": "Omnispace Agora Project 26.10.0 Predictable Share Token via md5Id",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to forge the shared-calendar iCal share token by deriving md5Id() from predictable fields such as object creation time, which is self-disclosed through autorDate and the iCal CREATED field. Attackers can compute the creation minute and forge the md5Id token to access and read a shared calendar's iCal feed without authorization."
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-11-13T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Generation of Predictable Numbers or Identifiers",
|
||||
"cweId": "CWE-340",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "unaffected",
|
||||
"vendor": "Omnispace",
|
||||
"product": "Agora Project",
|
||||
"packageURL": "pkg:github/xech/agora-project",
|
||||
"repo": "https://github.com/xech/agora-project",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:agora-project:agora-project:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"baseScore": 6.3,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE",
|
||||
"version": "3.1",
|
||||
"baseSeverity": "LOW",
|
||||
"baseScore": 3.7,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63170-shared-calendar-ical-share-token-forgeable-from-a-leaked-creation",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description",
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Geoffrey Robert of akailabs",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Valentin Holubec of akailabs",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,162 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-63173",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-07-15T21:18:20.187Z",
|
||||
"datePublished": "2026-11-13T17:08:32.475Z",
|
||||
"dateUpdated": "2026-11-13T17:08:32.475Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-13T17:08:32.475Z"
|
||||
},
|
||||
"title": "Omnispace Agora Project 26.10.0 Broken Access Control via isAutor()",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Omnispace Agora Project through 26.10.0 contains a broken access control vulnerability in which the isAutor() function in MdlObject.php grants accessRight=3 based solely on object authorship without verifying the user still belongs to the object's space. Attackers who were previously members and authored objects can retain unauthorized read access to space objects even after being removed from the space, leading to persistent information disclosure."
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"datePublic": "2026-11-13T00:00:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Missing Authorization",
|
||||
"cweId": "CWE-862",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "unaffected",
|
||||
"vendor": "Omnispace",
|
||||
"product": "Agora Project",
|
||||
"packageURL": "pkg:github/xech/agora-project",
|
||||
"repo": "https://github.com/xech/agora-project",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:agora-project:agora-project:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "26.10.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"baseScore": 5.3,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"version": "3.1",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"baseScore": 5.4,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.akailabs.fr/blog/multiple-vulnerabilities-in-agora-project-26-5-2#cve-2026-63173-stale-author-access-after-space-revocation-via-isautor",
|
||||
"name": "akailabs Disclosure",
|
||||
"tags": [
|
||||
"technical-description",
|
||||
"exploit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Geoffrey Robert of akailabs",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Valentin Holubec of akailabs",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "GitHub_M",
|
||||
"dateReserved": "2026-07-17T14:47:08.031Z",
|
||||
"datePublished": "2026-11-11T02:40:47.419Z",
|
||||
"dateUpdated": "2026-11-11T02:40:47.419Z"
|
||||
"dateUpdated": "2026-11-13T17:02:51.147Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -103,6 +103,40 @@
|
||||
"advisory": "GHSA-cfm6-c7rv-58xj",
|
||||
"discovery": "UNKNOWN"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T16:58:14.309072Z",
|
||||
"id": "CVE-2026-63660",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T17:02:51.147Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "GitHub_M",
|
||||
"dateReserved": "2026-07-20T17:12:12.891Z",
|
||||
"datePublished": "2026-11-11T03:51:12.232Z",
|
||||
"dateUpdated": "2026-11-11T03:51:12.232Z"
|
||||
"dateUpdated": "2026-11-13T17:04:04.444Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -107,6 +107,40 @@
|
||||
"advisory": "GHSA-ffx6-xjp6-x33g",
|
||||
"discovery": "UNKNOWN"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-13T17:03:41.986185Z",
|
||||
"id": "CVE-2026-64666",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-13T17:04:04.444Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "apache",
|
||||
"dateReserved": "2026-08-02T00:09:01.550Z",
|
||||
"datePublished": "2026-11-09T09:55:00.238Z",
|
||||
"dateUpdated": "2026-11-12T15:05:33.620Z"
|
||||
"dateUpdated": "2026-11-13T17:07:52.875Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -123,23 +123,23 @@
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.3,
|
||||
"baseScore": 9.8,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
"integrityImpact": "LOW",
|
||||
"baseSeverity": "CRITICAL",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "LOW"
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T15:05:24.911063Z",
|
||||
"timestamp": "2026-11-13T17:06:58.098402Z",
|
||||
"id": "CVE-2026-68982",
|
||||
"options": [
|
||||
{
|
||||
@@ -149,7 +149,7 @@
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
@@ -162,7 +162,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T15:05:33.620Z"
|
||||
"dateUpdated": "2026-11-13T17:07:52.875Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "apache",
|
||||
"dateReserved": "2026-08-23T12:12:19.275Z",
|
||||
"datePublished": "2026-10-19T10:03:57.474Z",
|
||||
"dateUpdated": "2026-10-20T03:55:29.414Z"
|
||||
"dateUpdated": "2026-11-13T16:21:47.294Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -227,13 +227,13 @@
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-10-19T00:00:00+00:00",
|
||||
"timestamp": "2026-10-20T03:55:29.887531Z",
|
||||
"id": "CVE-2026-78162",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "poc"
|
||||
@@ -246,16 +246,16 @@
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3",
|
||||
"id": "CVE-2026-78162"
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-10-20T03:55:29.414Z"
|
||||
"dateUpdated": "2026-11-13T16:21:47.294Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-08-27T10:42:56.761Z",
|
||||
"datePublished": "2026-08-27T11:15:42.330Z",
|
||||
"dateUpdated": "2026-11-13T00:17:16.765Z"
|
||||
"dateUpdated": "2026-11-13T16:59:01.620Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -136,6 +136,26 @@
|
||||
"cpe:/a:redhat:satellite_utils:6.18::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rubygem-katello",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:4.20.0.12-1.el9sat",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6",
|
||||
@@ -148,6 +168,14 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:100120",
|
||||
"name": "RHSA-2026:100120",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99949",
|
||||
"name": "RHSA-2026:99949",
|
||||
@@ -229,7 +257,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-13T00:17:16.765Z"
|
||||
"dateUpdated": "2026-11-13T16:59:01.620Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-09-07T06:25:38.505Z",
|
||||
"datePublished": "2026-11-12T20:19:29.433Z",
|
||||
"dateUpdated": "2026-11-12T23:55:58.300Z"
|
||||
"dateUpdated": "2026-11-13T16:56:56.573Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -135,9 +135,37 @@
|
||||
"cpe:/a:redhat:satellite_maintenance:6.18::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.18::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Satellite 6.19 for RHEL 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "foreman",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:3.18.0.19-1.el9sat",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:satellite:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_capsule:6.19::el9",
|
||||
"cpe:/a:redhat:satellite_utils:6.19::el9"
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:100120",
|
||||
"name": "RHSA-2026:100120",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99949",
|
||||
"name": "RHSA-2026:99949",
|
||||
@@ -213,7 +241,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-12T23:55:58.300Z"
|
||||
"dateUpdated": "2026-11-13T16:56:56.573Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
Loaded 100 of 110 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user