CVE sync 2026-11-11T18:41:46Z

data/2026/106xxx/CVE-2026-106133.json

@@ -0,0 +1,119 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-106133",
+        "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+        "state": "PUBLISHED",
+        "assignerShortName": "ProgressSoftware",
+        "dateReserved": "2026-10-06T15:51:08.623Z",
+        "datePublished": "2026-11-11T17:32:36.189Z",
+        "dateUpdated": "2026-11-11T17:32:36.189Z"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+                "shortName": "ProgressSoftware",
+                "dateUpdated": "2026-11-11T17:32:36.189Z"
+            },
+            "title": "Incorrect Authorization in Telerik Report Server Web Report Designer",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "cweId": "CWE-863",
+                            "description": "CWE-863 Incorrect Authorization",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "impacts": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "value": "Accessing Functionality Not Properly Constrained by ACLs"
+                        }
+                    ]
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "Progress Software",
+                    "product": "Telerik Report Server",
+                    "versions": [
+                        {
+                            "status": "affected",
+                            "version": "0",
+                            "lessThan": "12.3.26.1110",
+                            "versionType": "custom"
+                        }
+                    ],
+                    "defaultStatus": "unaffected"
+                }
+            ],
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web Report Designer allows an authenticated attacker with low privileges to perform unauthorized operations on shared report resources, affecting their integrity and availability.",
+                    "supportingMedia": [
+                        {
+                            "type": "text/html",
+                            "base64": false,
+                            "value": "<p>In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web Report Designer allows an authenticated attacker with low privileges to perform unauthorized operations on shared report resources, affecting their integrity and availability.</p>"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://www.telerik.com/report-server/documentation/knowledge-base/kb-security-incorrect-authorization-cve-2026-106133",
+                    "tags": [
+                        "vendor-advisory"
+                    ]
+                }
+            ],
+            "metrics": [
+                {
+                    "format": "CVSS",
+                    "scenarios": [
+                        {
+                            "lang": "en",
+                            "value": "GENERAL"
+                        }
+                    ],
+                    "cvssV3_1": {
+                        "version": "3.1",
+                        "attackVector": "NETWORK",
+                        "attackComplexity": "LOW",
+                        "privilegesRequired": "LOW",
+                        "userInteraction": "NONE",
+                        "scope": "UNCHANGED",
+                        "confidentialityImpact": "LOW",
+                        "integrityImpact": "LOW",
+                        "availabilityImpact": "LOW",
+                        "baseSeverity": "MEDIUM",
+                        "baseScore": 6.3,
+                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+                    }
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Noam Frenkel",
+                    "type": "finder"
+                }
+            ],
+            "source": {
+                "discovery": "EXTERNAL"
+            },
+            "x_generator": {
+                "engine": "Vulnogram 0.2.0"
+            }
+        }
+    }
+}

data/2026/106xxx/CVE-2026-106137.json

@@ -0,0 +1,126 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-106137",
+        "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+        "state": "PUBLISHED",
+        "assignerShortName": "ProgressSoftware",
+        "dateReserved": "2026-10-06T15:51:10.391Z",
+        "datePublished": "2026-11-11T17:29:12.021Z",
+        "dateUpdated": "2026-11-11T17:29:12.021Z"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+                "shortName": "ProgressSoftware",
+                "dateUpdated": "2026-11-11T17:29:12.021Z"
+            },
+            "title": "ClassFactory Race Condition and Retained Assembly Memory in Telerik UI for ASP.NET MVC",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "cweId": "CWE-362",
+                            "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
+                            "type": "CWE"
+                        },
+                        {
+                            "lang": "en",
+                            "cweId": "CWE-401",
+                            "description": "CWE-401 Missing Release of Memory after Effective Lifetime",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "impacts": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "value": "Leveraging Race Conditions"
+                        }
+                    ]
+                },
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "value": "Excessive Allocation"
+                        }
+                    ]
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "Progress Software",
+                    "product": "Telerik UI for ASP.NET MVC",
+                    "versions": [
+                        {
+                            "status": "affected",
+                            "version": "2012.2.710",
+                            "lessThan": "2026.3.1015",
+                            "versionType": "custom"
+                        }
+                    ],
+                    "defaultStatus": "unknown"
+                }
+            ],
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and insertion are not atomic, and case variations in aggregate descriptors can produce distinct retained types even though member resolution is case-insensitive. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication, by submitting concurrent or repeated crafted requests. These requests may corrupt dictionary state or increase CPU and memory use, potentially degrading availability. The issue is fixed in version `2026.3.1015`.",
+                    "supportingMedia": [
+                        {
+                            "type": "text/html",
+                            "base64": false,
+                            "value": "<p>In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and insertion are not atomic, and case variations in aggregate descriptors can produce distinct retained types even though member resolution is case-insensitive. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication, by submitting concurrent or repeated crafted requests. These requests may corrupt dictionary state or increase CPU and memory use, potentially degrading availability. The issue is fixed in version `2026.3.1015`.</p>"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://www.telerik.com/aspnet-mvc/documentation/knowledge-base/kb-security-class-factory-cve-2026-106137",
+                    "tags": [
+                        "vendor-advisory"
+                    ]
+                }
+            ],
+            "metrics": [
+                {
+                    "format": "CVSS",
+                    "scenarios": [
+                        {
+                            "lang": "en",
+                            "value": "GENERAL"
+                        }
+                    ],
+                    "cvssV3_1": {
+                        "version": "3.1",
+                        "attackVector": "NETWORK",
+                        "attackComplexity": "LOW",
+                        "privilegesRequired": "NONE",
+                        "userInteraction": "NONE",
+                        "scope": "CHANGED",
+                        "confidentialityImpact": "NONE",
+                        "integrityImpact": "NONE",
+                        "availabilityImpact": "HIGH",
+                        "baseSeverity": "HIGH",
+                        "baseScore": 8.6,
+                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
+                    }
+                }
+            ],
+            "source": {
+                "discovery": "INTERNAL"
+            },
+            "x_generator": {
+                "engine": "Vulnogram 0.2.0"
+            }
+        }
+    }
+}

data/2026/106xxx/CVE-2026-106152.json

@@ -0,0 +1,112 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-106152",
+        "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+        "state": "PUBLISHED",
+        "assignerShortName": "ProgressSoftware",
+        "dateReserved": "2026-10-06T15:51:11.738Z",
+        "datePublished": "2026-11-11T17:35:08.835Z",
+        "dateUpdated": "2026-11-11T17:35:08.835Z"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+                "shortName": "ProgressSoftware",
+                "dateUpdated": "2026-11-11T17:35:08.835Z"
+            },
+            "title": "External Control of Configuration Setting in Telerik Report Server",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "cweId": "CWE-15",
+                            "description": "CWE-15 External Control of System or Configuration Setting",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "impacts": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "value": "Configuration/Environment Manipulation"
+                        }
+                    ]
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "Progress Software",
+                    "product": "Telerik Report Server",
+                    "versions": [
+                        {
+                            "status": "affected",
+                            "version": "0",
+                            "lessThan": "12.3.26.1110",
+                            "versionType": "custom"
+                        }
+                    ],
+                    "defaultStatus": "unaffected"
+                }
+            ],
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a system configuration setting vulnerability allows an unauthenticated remote attacker to influence the server address used by Report Server when generating links and notifications. With user interaction, this can lead to disclosure of sensitive information and account takeover.",
+                    "supportingMedia": [
+                        {
+                            "type": "text/html",
+                            "base64": false,
+                            "value": "<p>In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a system configuration setting vulnerability allows an unauthenticated remote attacker to influence the server address used by Report Server when generating links and notifications. With user interaction, this can lead to disclosure of sensitive information and account takeover.</p>"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://www.telerik.com/report-server/documentation/knowledge-base/kb-security-external-control-of-system-or-configuration-setting-cve-2026-106152",
+                    "tags": [
+                        "vendor-advisory"
+                    ]
+                }
+            ],
+            "metrics": [
+                {
+                    "format": "CVSS",
+                    "scenarios": [
+                        {
+                            "lang": "en",
+                            "value": "GENERAL"
+                        }
+                    ],
+                    "cvssV3_1": {
+                        "version": "3.1",
+                        "attackVector": "NETWORK",
+                        "attackComplexity": "LOW",
+                        "privilegesRequired": "NONE",
+                        "userInteraction": "REQUIRED",
+                        "scope": "UNCHANGED",
+                        "confidentialityImpact": "HIGH",
+                        "integrityImpact": "HIGH",
+                        "availabilityImpact": "HIGH",
+                        "baseSeverity": "HIGH",
+                        "baseScore": 8.8,
+                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+                    }
+                }
+            ],
+            "source": {
+                "discovery": "INTERNAL"
+            },
+            "x_generator": {
+                "engine": "Vulnogram 0.2.0"
+            }
+        }
+    }
+}

data/2026/106xxx/CVE-2026-106156.json

@@ -0,0 +1,112 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-106156",
+        "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+        "state": "PUBLISHED",
+        "assignerShortName": "ProgressSoftware",
+        "dateReserved": "2026-10-06T15:51:11.738Z",
+        "datePublished": "2026-11-11T17:24:56.315Z",
+        "dateUpdated": "2026-11-11T17:24:56.315Z"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
+                "shortName": "ProgressSoftware",
+                "dateUpdated": "2026-11-11T17:24:56.315Z"
+            },
+            "title": "Uncontrolled Resource Consumption in Telerik UI for ASP.NET Core Server-side Aggregation",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "cweId": "CWE-400",
+                            "description": "CWE-400 Uncontrolled Resource Consumption",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "impacts": [
+                {
+                    "descriptions": [
+                        {
+                            "lang": "en",
+                            "value": "Excessive Allocation"
+                        }
+                    ]
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "Progress Software",
+                    "product": "Telerik UI for ASP.NET Core",
+                    "versions": [
+                        {
+                            "status": "affected",
+                            "version": "2015.1.318",
+                            "lessThan": "2026.3.1015",
+                            "versionType": "custom"
+                        }
+                    ],
+                    "defaultStatus": "unknown"
+                }
+            ],
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.811`, repeated server-side aggregation requests, with or without grouping, cause dynamic assemblies and load contexts to be retained, resulting in accumulating process memory consumption. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication. Repeated requests can cause memory growth that may exhaust available resources and affect application availability. Disabling grouping in the client-side interface does not prevent direct requests containing these descriptors. The issue is fixed in version `2026.3.1015`.",
+                    "supportingMedia": [
+                        {
+                            "type": "text/html",
+                            "base64": false,
+                            "value": "<p>In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.811`, repeated server-side aggregation requests, with or without grouping, cause dynamic assemblies and load contexts to be retained, resulting in accumulating process memory consumption. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication. Repeated requests can cause memory growth that may exhaust available resources and affect application availability. Disabling grouping in the client-side interface does not prevent direct requests containing these descriptors. The issue is fixed in version `2026.3.1015`.</p>"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://www.telerik.com/aspnet-core-ui/documentation/knowledge-base/kb-security-uncontrolled-resource-consumption-cve-2026-106156",
+                    "tags": [
+                        "vendor-advisory"
+                    ]
+                }
+            ],
+            "metrics": [
+                {
+                    "format": "CVSS",
+                    "scenarios": [
+                        {
+                            "lang": "en",
+                            "value": "GENERAL"
+                        }
+                    ],
+                    "cvssV3_1": {
+                        "version": "3.1",
+                        "attackVector": "NETWORK",
+                        "attackComplexity": "LOW",
+                        "privilegesRequired": "NONE",
+                        "userInteraction": "NONE",
+                        "scope": "CHANGED",
+                        "confidentialityImpact": "NONE",
+                        "integrityImpact": "NONE",
+                        "availabilityImpact": "HIGH",
+                        "baseSeverity": "HIGH",
+                        "baseScore": 8.6,
+                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
+                    }
+                }
+            ],
+            "source": {
+                "discovery": "INTERNAL"
+            },
+            "x_generator": {
+                "engine": "Vulnogram 0.2.0"
+            }
+        }
+    }
+}

data/2026/107xxx/CVE-2026-107154.json

@@ -8,14 +8,14 @@
         "assignerShortName": "sonicwall",
         "dateReserved": "2026-10-07T10:36:48.372Z",
         "datePublished": "2026-11-06T18:52:04.520Z",
-        "dateUpdated": "2026-11-06T19:11:42.648Z"
+        "dateUpdated": "2026-11-11T18:19:29.799Z"
     },
     "containers": {
         "cna": {
             "providerMetadata": {
                 "orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
                 "shortName": "sonicwall",
-                "dateUpdated": "2026-11-06T18:52:04.520Z"
+                "dateUpdated": "2026-11-11T18:19:29.799Z"
             },
             "datePublic": "2026-11-06T18:50:00.000Z",
             "problemTypes": [
@@ -72,6 +72,13 @@
                     ]
                 }
             ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Dan Stefan Alexandru of Pentest-Tools.com",
+                    "type": "finder"
+                }
+            ],
             "source": {
                 "advisory": "SNWLID-2026-0014",
                 "discovery": "EXTERNAL"

data/2026/107xxx/CVE-2026-107155.json

@@ -8,14 +8,14 @@
         "assignerShortName": "sonicwall",
         "dateReserved": "2026-10-07T10:39:52.120Z",
         "datePublished": "2026-11-06T18:50:03.769Z",
-        "dateUpdated": "2026-11-07T04:55:52.900Z"
+        "dateUpdated": "2026-11-11T18:19:54.128Z"
     },
     "containers": {
         "cna": {
             "providerMetadata": {
                 "orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
                 "shortName": "sonicwall",
-                "dateUpdated": "2026-11-06T18:50:03.769Z"
+                "dateUpdated": "2026-11-11T18:19:54.128Z"
             },
             "datePublic": "2026-11-06T18:40:00.000Z",
             "problemTypes": [
@@ -72,6 +72,13 @@
                     ]
                 }
             ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Dan Stefan Alexandru of Pentest-Tools.com",
+                    "type": "finder"
+                }
+            ],
             "source": {
                 "advisory": "SNWLID-2026-0014",
                 "discovery": "EXTERNAL"

data/2026/107xxx/CVE-2026-107247.json

@@ -0,0 +1,77 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-107247",
+        "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+        "state": "PUBLISHED",
+        "assignerShortName": "hackerone",
+        "dateReserved": "2026-10-07T15:00:00.550Z",
+        "datePublished": "2026-11-11T17:30:37.702Z",
+        "dateUpdated": "2026-11-11T17:30:37.702Z"
+    },
+    "containers": {
+        "cna": {
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "An authorization bypass in Revive Adserver 6.0.0 through 6.0.8 allows an authenticated manager restricted to one agency to access or modify resources belonging to another agency. Global input registration gives GET parameters precedence over POST parameters, while submitted administration forms use POST values. By supplying authorized object identifiers in the query string and different identifiers in the POST body, an attacker can cause permission checks and subsequent operations to target different objects. This permits unauthorized cross-agency changes, campaign ownership reassignment and disclosure of campaign and banner data. The regression was introduced in commit 156dee7bc3283c128f35e5a31bb305054cc8de1b and is fixed in Revive Adserver 6.0.9 by restoring POST precedence in global input registration."
+                }
+            ],
+            "affected": [
+                {
+                    "defaultStatus": "unaffected",
+                    "vendor": "Revive",
+                    "product": "Adserver",
+                    "versions": [
+                        {
+                            "version": "6.0.0",
+                            "status": "affected",
+                            "lessThanOrEqual": "6.0.8",
+                            "versionType": "semver"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://hackerone.com/reports/3831102"
+                }
+            ],
+            "metrics": [
+                {
+                    "cvssV3_0": {
+                        "version": "3.0",
+                        "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
+                        "baseScore": 8.1,
+                        "baseSeverity": "HIGH"
+                    }
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "type": "CWE",
+                            "lang": "en",
+                            "cweId": "CWE-639",
+                            "description": "CWE-639 Insecure Direct Object Reference (IDOR)"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "kushbafti",
+                    "type": "finder"
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+                "shortName": "hackerone",
+                "dateUpdated": "2026-11-11T17:30:37.702Z"
+            }
+        }
+    }
+}

data/2026/107xxx/CVE-2026-107662.json

@@ -0,0 +1,77 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-107662",
+        "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+        "state": "PUBLISHED",
+        "assignerShortName": "hackerone",
+        "dateReserved": "2026-10-08T15:00:00.795Z",
+        "datePublished": "2026-11-11T17:30:37.719Z",
+        "dateUpdated": "2026-11-11T17:30:37.719Z"
+    },
+    "containers": {
+        "cna": {
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to extract arbitrary database values through the banner-zone.php and campaign-zone.php administration pages. Permission checks and database queries obtain identifiers through inconsistent request-input precedence, allowing an authorized numeric identifier to pass validation while a different, attacker-controlled value reaches an SQL query. Extracted data can include password hashes and active session identifiers. Reusing an unexpired administrator session can grant administrative access, allowing modification of configuration and disruption of ad delivery. The issue is fixed in Revive Adserver 6.0.9 by consistently selecting POST values before GET values in both global input registration and common input helpers, and excluding cookies from these helpers. Both commits e301dbbb7 and 0aa9d0124 are required for the complete correction."
+                }
+            ],
+            "affected": [
+                {
+                    "defaultStatus": "unaffected",
+                    "vendor": "Revive",
+                    "product": "Adserver",
+                    "versions": [
+                        {
+                            "version": "0",
+                            "status": "affected",
+                            "lessThanOrEqual": "6.0.8",
+                            "versionType": "semver"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://hackerone.com/reports/3896779"
+                }
+            ],
+            "metrics": [
+                {
+                    "cvssV3_0": {
+                        "version": "3.0",
+                        "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+                        "baseScore": 8.8,
+                        "baseSeverity": "HIGH"
+                    }
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "type": "CWE",
+                            "lang": "en",
+                            "cweId": "CWE-89",
+                            "description": "CWE-89 SQL Injection"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "sh4d0byss",
+                    "type": "finder"
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+                "shortName": "hackerone",
+                "dateUpdated": "2026-11-11T17:30:37.719Z"
+            }
+        }
+    }
+}

data/2026/108xxx/CVE-2026-108558.json

@@ -0,0 +1,77 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-108558",
+        "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+        "state": "PUBLISHED",
+        "assignerShortName": "hackerone",
+        "dateReserved": "2026-10-10T15:00:00.708Z",
+        "datePublished": "2026-11-11T17:30:37.732Z",
+        "dateUpdated": "2026-11-11T17:30:37.732Z"
+    },
+    "containers": {
+        "cna": {
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "A reflected cross-site scripting vulnerability in the conversion-statistics pages of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in an authenticated user's browser by persuading them to visit a crafted URL. An incorrect ownership check validates the advertiser identifier instead of the supplied website identifier, allowing malicious website input to reach HTML output without appropriate encoding. A related output issue affects the hour parameter. The issue is fixed in Revive Adserver 6.0.9 by validating the correct website identifier and normalising the hour parameter before formatting."
+                }
+            ],
+            "affected": [
+                {
+                    "defaultStatus": "unaffected",
+                    "vendor": "Revive",
+                    "product": "Adserver",
+                    "versions": [
+                        {
+                            "version": "0",
+                            "status": "affected",
+                            "lessThanOrEqual": "6.0.8",
+                            "versionType": "semver"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://hackerone.com/reports/3878649"
+                }
+            ],
+            "metrics": [
+                {
+                    "cvssV3_0": {
+                        "version": "3.0",
+                        "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+                        "baseScore": 6.1,
+                        "baseSeverity": "MEDIUM"
+                    }
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "type": "CWE",
+                            "lang": "en",
+                            "cweId": "CWE-79",
+                            "description": "CWE-79 Cross-site Scripting (XSS) - Reflected"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Patrick Lang (7YR)",
+                    "type": "finder"
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+                "shortName": "hackerone",
+                "dateUpdated": "2026-11-11T17:30:37.732Z"
+            }
+        }
+    }
+}

data/2026/108xxx/CVE-2026-108559.json

@@ -0,0 +1,77 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-108559",
+        "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+        "state": "PUBLISHED",
+        "assignerShortName": "hackerone",
+        "dateReserved": "2026-10-10T15:00:00.708Z",
+        "datePublished": "2026-11-11T17:30:37.689Z",
+        "dateUpdated": "2026-11-11T17:30:37.689Z"
+    },
+    "containers": {
+        "cna": {
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "A reflected cross-site scripting vulnerability in the iframe invocation options of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in an authenticated user's browser by persuading them to visit a crafted URL. When generating invocation tags for an any-size zone, the frame_width and frame_height request parameters are included in HTML attributes without appropriate encoding. The issue is fixed in Revive Adserver 6.0.9 by HTML-encoding the affected values in the invocation-option form fields."
+                }
+            ],
+            "affected": [
+                {
+                    "defaultStatus": "unaffected",
+                    "vendor": "Revive",
+                    "product": "Adserver",
+                    "versions": [
+                        {
+                            "version": "0",
+                            "status": "affected",
+                            "lessThanOrEqual": "6.0.8",
+                            "versionType": "semver"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://hackerone.com/reports/3908050"
+                }
+            ],
+            "metrics": [
+                {
+                    "cvssV3_0": {
+                        "version": "3.0",
+                        "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+                        "baseScore": 6.1,
+                        "baseSeverity": "MEDIUM"
+                    }
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "type": "CWE",
+                            "lang": "en",
+                            "cweId": "CWE-79",
+                            "description": "CWE-79 Cross-site Scripting (XSS) - Reflected"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Adam Rayyan Aryasatya (kannrisha)",
+                    "type": "finder"
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+                "shortName": "hackerone",
+                "dateUpdated": "2026-11-11T17:30:37.689Z"
+            }
+        }
+    }
+}

data/2026/108xxx/CVE-2026-108560.json

@@ -0,0 +1,77 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-108560",
+        "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+        "state": "PUBLISHED",
+        "assignerShortName": "hackerone",
+        "dateReserved": "2026-10-10T15:00:00.709Z",
+        "datePublished": "2026-11-11T17:30:37.740Z",
+        "dateUpdated": "2026-11-11T17:30:37.740Z"
+    },
+    "containers": {
+        "cna": {
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "A reflected cross-site scripting vulnerability in updates-history.php in Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in a victim's browser by persuading them to visit a crafted URL. Attacker-controlled values are included in XML command attributes without appropriate encoding, allowing injection of executable XHTML into the response. The preliminary session check omits GET xajax requests, exposing an unauthenticated attack path, while authenticated administrator requests also reach the unsafe output. The issue is fixed in Revive Adserver 6.0.9 by applying the session check to both GET and POST requests and encoding XML command attribute values in both response serializers."
+                }
+            ],
+            "affected": [
+                {
+                    "defaultStatus": "unaffected",
+                    "vendor": "Revive",
+                    "product": "Adserver",
+                    "versions": [
+                        {
+                            "version": "0",
+                            "status": "affected",
+                            "lessThanOrEqual": "6.0.8",
+                            "versionType": "semver"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://hackerone.com/reports/4075098"
+                }
+            ],
+            "metrics": [
+                {
+                    "cvssV3_0": {
+                        "version": "3.0",
+                        "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+                        "baseScore": 6.1,
+                        "baseSeverity": "MEDIUM"
+                    }
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "type": "CWE",
+                            "lang": "en",
+                            "cweId": "CWE-79",
+                            "description": "CWE-79 Cross-site Scripting (XSS) - Reflected"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Matías López Pereira (HackerOne: @mlopez01)",
+                    "type": "finder"
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+                "shortName": "hackerone",
+                "dateUpdated": "2026-11-11T17:30:37.740Z"
+            }
+        }
+    }
+}

data/2026/108xxx/CVE-2026-108561.json

@@ -0,0 +1,77 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-108561",
+        "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+        "state": "PUBLISHED",
+        "assignerShortName": "hackerone",
+        "dateReserved": "2026-10-10T15:00:00.709Z",
+        "datePublished": "2026-11-11T17:30:37.685Z",
+        "dateUpdated": "2026-11-11T17:30:37.685Z"
+    },
+    "containers": {
+        "cna": {
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in a victim's browser by persuading them to follow a crafted report URL and complete normal reauthentication. An attacker-controlled period_preset value can be saved in the victim's session and inserted into JavaScript without appropriate encoding. The payload can execute on the initial report view and subsequent report views using the stored defaults. The issue is fixed in Revive Adserver 6.0.9 by applying JSON encoding appropriate for the JavaScript context to date-selection values."
+                }
+            ],
+            "affected": [
+                {
+                    "defaultStatus": "unaffected",
+                    "vendor": "Revive",
+                    "product": "Adserver",
+                    "versions": [
+                        {
+                            "version": "0",
+                            "status": "affected",
+                            "lessThanOrEqual": "6.0.8",
+                            "versionType": "semver"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://hackerone.com/reports/4116433"
+                }
+            ],
+            "metrics": [
+                {
+                    "cvssV3_0": {
+                        "version": "3.0",
+                        "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+                        "baseScore": 6.1,
+                        "baseSeverity": "MEDIUM"
+                    }
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "type": "CWE",
+                            "lang": "en",
+                            "cweId": "CWE-79",
+                            "description": "CWE-79 Cross-site Scripting (XSS) - Stored"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Matías López Pereira (HackerOne: @mlopez01)",
+                    "type": "finder"
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+                "shortName": "hackerone",
+                "dateUpdated": "2026-11-11T17:30:37.685Z"
+            }
+        }
+    }
+}

data/2026/108xxx/CVE-2026-108562.json

@@ -0,0 +1,77 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-108562",
+        "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+        "state": "PUBLISHED",
+        "assignerShortName": "hackerone",
+        "dateReserved": "2026-10-10T15:00:00.709Z",
+        "datePublished": "2026-11-11T17:30:37.432Z",
+        "dateUpdated": "2026-11-11T17:30:37.432Z"
+    },
+    "containers": {
+        "cna": {
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "A stored cross-site scripting vulnerability in maintenance-appendcode-check.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to execute JavaScript in an administrator's browser. A manager can store a malicious tracker name and cause the tracker to appear in the append-code maintenance results. When an administrator opens the affected maintenance page, the tracker name is included in HTML without appropriate encoding. The issue is fixed in Revive Adserver 6.0.9 by HTML-encoding tracker names when displaying the maintenance results."
+                }
+            ],
+            "affected": [
+                {
+                    "defaultStatus": "unaffected",
+                    "vendor": "Revive",
+                    "product": "Adserver",
+                    "versions": [
+                        {
+                            "version": "0",
+                            "status": "affected",
+                            "lessThanOrEqual": "6.0.8",
+                            "versionType": "semver"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://hackerone.com/reports/3826207"
+                }
+            ],
+            "metrics": [
+                {
+                    "cvssV3_0": {
+                        "version": "3.0",
+                        "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+                        "baseScore": 5.4,
+                        "baseSeverity": "MEDIUM"
+                    }
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "type": "CWE",
+                            "lang": "en",
+                            "cweId": "CWE-79",
+                            "description": "CWE-79 Cross-site Scripting (XSS) - Stored"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "flasks",
+                    "type": "finder"
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+                "shortName": "hackerone",
+                "dateUpdated": "2026-11-11T17:30:37.432Z"
+            }
+        }
+    }
+}

data/2026/108xxx/CVE-2026-108563.json

@@ -0,0 +1,77 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-108563",
+        "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+        "state": "PUBLISHED",
+        "assignerShortName": "hackerone",
+        "dateReserved": "2026-10-10T15:00:00.709Z",
+        "datePublished": "2026-11-11T17:30:37.737Z",
+        "dateUpdated": "2026-11-11T17:30:37.737Z"
+    },
+    "containers": {
+        "cna": {
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "Spreadsheet formula injection in conversion-tracking report exports in Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to submit conversion values that are written as formulas instead of text in an XLS workbook. When a user opens the exported report in a spreadsheet application, attacker-supplied formulas can be evaluated. The confirmed impact is formula execution within the workbook; disclosure of information to the attacker has not been established. The issue is fixed in Revive Adserver 6.0.9 by sanitising conversion values before writing them to the affected XLS report sections."
+                }
+            ],
+            "affected": [
+                {
+                    "defaultStatus": "unaffected",
+                    "vendor": "Revive",
+                    "product": "Adserver",
+                    "versions": [
+                        {
+                            "version": "0",
+                            "status": "affected",
+                            "lessThanOrEqual": "6.0.8",
+                            "versionType": "semver"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://hackerone.com/reports/3859000"
+                }
+            ],
+            "metrics": [
+                {
+                    "cvssV3_0": {
+                        "version": "3.0",
+                        "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
+                        "baseScore": 4.7,
+                        "baseSeverity": "MEDIUM"
+                    }
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "type": "CWE",
+                            "lang": "en",
+                            "cweId": "CWE-94",
+                            "description": "CWE-94 Code Injection"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "BapToutatis",
+                    "type": "finder"
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+                "shortName": "hackerone",
+                "dateUpdated": "2026-11-11T17:30:37.737Z"
+            }
+        }
+    }
+}

data/2026/108xxx/CVE-2026-108564.json

@@ -0,0 +1,77 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-108564",
+        "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+        "state": "PUBLISHED",
+        "assignerShortName": "hackerone",
+        "dateReserved": "2026-10-10T15:00:00.709Z",
+        "datePublished": "2026-11-11T17:30:37.689Z",
+        "dateUpdated": "2026-11-11T17:30:37.689Z"
+    },
+    "containers": {
+        "cna": {
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "A reflected cross-site scripting vulnerability in the invocation-tag generation interface of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in an authenticated user's browser by persuading them to visit a crafted URL. When Direct Selection is enabled, an attacker-controlled banner identifier can be included in HTML form fields without appropriate encoding. Direct Selection is disabled by default. The issue is fixed in Revive Adserver 6.0.9 by HTML-encoding banner identifier values in the invocation-option form fields."
+                }
+            ],
+            "affected": [
+                {
+                    "defaultStatus": "unaffected",
+                    "vendor": "Revive",
+                    "product": "Adserver",
+                    "versions": [
+                        {
+                            "version": "0",
+                            "status": "affected",
+                            "lessThanOrEqual": "6.0.8",
+                            "versionType": "semver"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://hackerone.com/reports/3942028"
+                }
+            ],
+            "metrics": [
+                {
+                    "cvssV3_0": {
+                        "version": "3.0",
+                        "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
+                        "baseScore": 4.7,
+                        "baseSeverity": "MEDIUM"
+                    }
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "type": "CWE",
+                            "lang": "en",
+                            "cweId": "CWE-79",
+                            "description": "CWE-79 Cross-site Scripting (XSS) - Reflected"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Umesh Paytode",
+                    "type": "finder"
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+                "shortName": "hackerone",
+                "dateUpdated": "2026-11-11T17:30:37.689Z"
+            }
+        }
+    }
+}

data/2026/108xxx/CVE-2026-108565.json

@@ -0,0 +1,77 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.2",
+    "cveMetadata": {
+        "cveId": "CVE-2026-108565",
+        "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+        "state": "PUBLISHED",
+        "assignerShortName": "hackerone",
+        "dateReserved": "2026-10-10T15:00:00.709Z",
+        "datePublished": "2026-11-11T17:30:37.731Z",
+        "dateUpdated": "2026-11-11T17:30:37.731Z"
+    },
+    "containers": {
+        "cna": {
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "A reflected cross-site scripting vulnerability in the popup invocation options of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in an authenticated user's browser by persuading them to visit a crafted URL. The top, left, timeout and delay request parameters are included in HTML attributes without appropriate encoding. Exploitation requires an existing popup zone, which can be created through the administrator API but is not offered by the normal zone-creation interface. The issue is fixed in Revive Adserver 6.0.9 by HTML-encoding the affected popup option values."
+                }
+            ],
+            "affected": [
+                {
+                    "defaultStatus": "unaffected",
+                    "vendor": "Revive",
+                    "product": "Adserver",
+                    "versions": [
+                        {
+                            "version": "0",
+                            "status": "affected",
+                            "lessThanOrEqual": "6.0.8",
+                            "versionType": "semver"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://hackerone.com/reports/3971985"
+                }
+            ],
+            "metrics": [
+                {
+                    "cvssV3_0": {
+                        "version": "3.0",
+                        "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
+                        "baseScore": 4.7,
+                        "baseSeverity": "MEDIUM"
+                    }
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "type": "CWE",
+                            "lang": "en",
+                            "cweId": "CWE-79",
+                            "description": "CWE-79 Cross-site Scripting (XSS) - Reflected"
+                        }
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "miauzxw",
+                    "type": "finder"
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
+                "shortName": "hackerone",
+                "dateUpdated": "2026-11-11T17:30:37.731Z"
+            }
+        }
+    }
+}

data/2026/114xxx/CVE-2026-114171.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-20T21:56:39.318Z",
         "datePublished": "2026-11-10T18:22:25.327Z",
-        "dateUpdated": "2026-11-11T11:49:16.936Z"
+        "dateUpdated": "2026-11-11T17:17:56.565Z"
     },
     "containers": {
         "cna": {
@@ -67,7 +67,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:49:16.936Z"
+                "dateUpdated": "2026-11-11T17:17:56.565Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116714.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-26T20:11:53.921Z",
         "datePublished": "2026-11-10T18:22:03.209Z",
-        "dateUpdated": "2026-11-11T11:48:55.237Z"
+        "dateUpdated": "2026-11-11T17:17:31.531Z"
     },
     "containers": {
         "cna": {
@@ -158,7 +158,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:48:55.237Z"
+                "dateUpdated": "2026-11-11T17:17:31.531Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116717.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-26T20:11:53.922Z",
         "datePublished": "2026-11-10T18:24:16.843Z",
-        "dateUpdated": "2026-11-11T11:51:06.486Z"
+        "dateUpdated": "2026-11-11T17:19:53.693Z"
     },
     "containers": {
         "cna": {
@@ -169,7 +169,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:06.486Z"
+                "dateUpdated": "2026-11-11T17:19:53.693Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116718.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-26T20:11:53.922Z",
         "datePublished": "2026-11-10T18:24:17.375Z",
-        "dateUpdated": "2026-11-11T11:51:07.002Z"
+        "dateUpdated": "2026-11-11T17:19:54.229Z"
     },
     "containers": {
         "cna": {
@@ -147,7 +147,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:07.002Z"
+                "dateUpdated": "2026-11-11T17:19:54.229Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116719.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-26T20:11:53.922Z",
         "datePublished": "2026-11-10T18:24:17.862Z",
-        "dateUpdated": "2026-11-11T11:51:07.456Z"
+        "dateUpdated": "2026-11-11T17:19:54.739Z"
     },
     "containers": {
         "cna": {
@@ -169,7 +169,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:07.456Z"
+                "dateUpdated": "2026-11-11T17:19:54.739Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116720.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-26T20:11:53.922Z",
         "datePublished": "2026-11-10T18:24:18.453Z",
-        "dateUpdated": "2026-11-11T11:51:07.991Z"
+        "dateUpdated": "2026-11-11T17:19:55.268Z"
     },
     "containers": {
         "cna": {
@@ -169,7 +169,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:07.991Z"
+                "dateUpdated": "2026-11-11T17:19:55.268Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116721.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-26T20:11:53.922Z",
         "datePublished": "2026-11-10T18:24:18.920Z",
-        "dateUpdated": "2026-11-11T11:51:08.454Z"
+        "dateUpdated": "2026-11-11T17:19:55.853Z"
     },
     "containers": {
         "cna": {
@@ -169,7 +169,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:08.454Z"
+                "dateUpdated": "2026-11-11T17:19:55.853Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116722.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-26T20:11:53.922Z",
         "datePublished": "2026-11-10T18:24:19.456Z",
-        "dateUpdated": "2026-11-11T11:51:09.070Z"
+        "dateUpdated": "2026-11-11T17:19:56.435Z"
     },
     "containers": {
         "cna": {
@@ -169,7 +169,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:09.070Z"
+                "dateUpdated": "2026-11-11T17:19:56.435Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116922.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.544Z",
         "datePublished": "2026-11-10T18:24:19.914Z",
-        "dateUpdated": "2026-11-11T11:51:09.662Z"
+        "dateUpdated": "2026-11-11T17:19:56.992Z"
     },
     "containers": {
         "cna": {
@@ -169,7 +169,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:09.662Z"
+                "dateUpdated": "2026-11-11T17:19:56.992Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116923.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.544Z",
         "datePublished": "2026-11-10T18:24:20.447Z",
-        "dateUpdated": "2026-11-11T11:51:10.194Z"
+        "dateUpdated": "2026-11-11T17:19:57.501Z"
     },
     "containers": {
         "cna": {
@@ -169,7 +169,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:10.194Z"
+                "dateUpdated": "2026-11-11T17:19:57.501Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116925.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.544Z",
         "datePublished": "2026-11-10T18:22:03.734Z",
-        "dateUpdated": "2026-11-11T11:48:55.822Z"
+        "dateUpdated": "2026-11-11T17:17:32.037Z"
     },
     "containers": {
         "cna": {
@@ -169,7 +169,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:48:55.822Z"
+                "dateUpdated": "2026-11-11T17:17:32.037Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116926.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:24:21.050Z",
-        "dateUpdated": "2026-11-11T11:51:10.707Z"
+        "dateUpdated": "2026-11-11T17:19:58.013Z"
     },
     "containers": {
         "cna": {
@@ -67,7 +67,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:10.707Z"
+                "dateUpdated": "2026-11-11T17:19:58.013Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116927.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:24:21.522Z",
-        "dateUpdated": "2026-11-11T11:51:11.164Z"
+        "dateUpdated": "2026-11-11T17:19:58.544Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:11.164Z"
+                "dateUpdated": "2026-11-11T17:19:58.544Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116928.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:21:54.613Z",
-        "dateUpdated": "2026-11-11T11:48:46.806Z"
+        "dateUpdated": "2026-11-11T17:17:22.814Z"
     },
     "containers": {
         "cna": {
@@ -416,7 +416,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:48:46.806Z"
+                "dateUpdated": "2026-11-11T17:17:22.814Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116929.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:24:22.056Z",
-        "dateUpdated": "2026-11-11T11:51:11.611Z"
+        "dateUpdated": "2026-11-11T17:19:59.086Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:11.611Z"
+                "dateUpdated": "2026-11-11T17:19:59.086Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116930.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:24:22.571Z",
-        "dateUpdated": "2026-11-11T11:51:12.216Z"
+        "dateUpdated": "2026-11-11T17:19:59.719Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:12.216Z"
+                "dateUpdated": "2026-11-11T17:19:59.719Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116931.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:24:23.159Z",
-        "dateUpdated": "2026-11-11T11:51:12.720Z"
+        "dateUpdated": "2026-11-11T17:20:00.171Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:12.720Z"
+                "dateUpdated": "2026-11-11T17:20:00.171Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116932.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:24:23.749Z",
-        "dateUpdated": "2026-11-11T11:51:13.298Z"
+        "dateUpdated": "2026-11-11T17:20:00.754Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:13.298Z"
+                "dateUpdated": "2026-11-11T17:20:00.754Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116933.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:24:24.215Z",
-        "dateUpdated": "2026-11-11T11:51:13.731Z"
+        "dateUpdated": "2026-11-11T17:20:01.353Z"
     },
     "containers": {
         "cna": {
@@ -154,7 +154,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:13.731Z"
+                "dateUpdated": "2026-11-11T17:20:01.353Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116934.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:24:24.759Z",
-        "dateUpdated": "2026-11-11T11:51:14.430Z"
+        "dateUpdated": "2026-11-11T17:20:01.877Z"
     },
     "containers": {
         "cna": {
@@ -196,7 +196,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:14.430Z"
+                "dateUpdated": "2026-11-11T17:20:01.877Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116935.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:24:25.310Z",
-        "dateUpdated": "2026-11-11T11:51:14.967Z"
+        "dateUpdated": "2026-11-11T17:20:02.514Z"
     },
     "containers": {
         "cna": {
@@ -196,7 +196,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:14.967Z"
+                "dateUpdated": "2026-11-11T17:20:02.514Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116936.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:24:25.821Z",
-        "dateUpdated": "2026-11-11T11:51:15.545Z"
+        "dateUpdated": "2026-11-11T17:20:02.968Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:15.545Z"
+                "dateUpdated": "2026-11-11T17:20:02.968Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116937.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.545Z",
         "datePublished": "2026-11-10T18:24:26.408Z",
-        "dateUpdated": "2026-11-11T11:51:16.146Z"
+        "dateUpdated": "2026-11-11T17:20:03.510Z"
     },
     "containers": {
         "cna": {
@@ -196,7 +196,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:16.146Z"
+                "dateUpdated": "2026-11-11T17:20:03.510Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116938.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.546Z",
         "datePublished": "2026-11-10T18:24:27.012Z",
-        "dateUpdated": "2026-11-11T11:51:16.626Z"
+        "dateUpdated": "2026-11-11T17:20:04.225Z"
     },
     "containers": {
         "cna": {
@@ -196,7 +196,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:16.626Z"
+                "dateUpdated": "2026-11-11T17:20:04.225Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116939.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.546Z",
         "datePublished": "2026-11-10T18:24:27.610Z",
-        "dateUpdated": "2026-11-11T11:51:17.168Z"
+        "dateUpdated": "2026-11-11T17:20:05.173Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:17.168Z"
+                "dateUpdated": "2026-11-11T17:20:05.173Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116940.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.546Z",
         "datePublished": "2026-11-10T18:24:28.159Z",
-        "dateUpdated": "2026-11-11T11:51:17.600Z"
+        "dateUpdated": "2026-11-11T17:20:05.706Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:17.600Z"
+                "dateUpdated": "2026-11-11T17:20:05.706Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116941.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.546Z",
         "datePublished": "2026-11-10T18:24:28.600Z",
-        "dateUpdated": "2026-11-11T11:51:18.104Z"
+        "dateUpdated": "2026-11-11T17:20:06.304Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:18.104Z"
+                "dateUpdated": "2026-11-11T17:20:06.304Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116942.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.546Z",
         "datePublished": "2026-11-10T18:24:29.184Z",
-        "dateUpdated": "2026-11-11T11:51:18.557Z"
+        "dateUpdated": "2026-11-11T17:20:06.769Z"
     },
     "containers": {
         "cna": {
@@ -196,7 +196,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:18.557Z"
+                "dateUpdated": "2026-11-11T17:20:06.769Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116943.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.546Z",
         "datePublished": "2026-11-10T18:24:29.702Z",
-        "dateUpdated": "2026-11-11T11:51:18.992Z"
+        "dateUpdated": "2026-11-11T17:20:07.312Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:18.992Z"
+                "dateUpdated": "2026-11-11T17:20:07.312Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116944.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.546Z",
         "datePublished": "2026-11-10T18:24:30.299Z",
-        "dateUpdated": "2026-11-11T11:51:19.449Z"
+        "dateUpdated": "2026-11-11T17:20:07.817Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:19.449Z"
+                "dateUpdated": "2026-11-11T17:20:07.817Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116945.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.547Z",
         "datePublished": "2026-11-10T18:24:30.902Z",
-        "dateUpdated": "2026-11-11T11:51:19.969Z"
+        "dateUpdated": "2026-11-11T17:20:08.286Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:19.969Z"
+                "dateUpdated": "2026-11-11T17:20:08.286Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116946.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.547Z",
         "datePublished": "2026-11-10T18:24:31.411Z",
-        "dateUpdated": "2026-11-11T11:51:20.423Z"
+        "dateUpdated": "2026-11-11T17:20:08.961Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:20.423Z"
+                "dateUpdated": "2026-11-11T17:20:08.961Z"
             },
             "references": [
                 {

data/2026/116xxx/CVE-2026-116947.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T02:25:21.547Z",
         "datePublished": "2026-11-10T18:24:31.917Z",
-        "dateUpdated": "2026-11-11T11:51:20.936Z"
+        "dateUpdated": "2026-11-11T17:20:09.467Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:20.936Z"
+                "dateUpdated": "2026-11-11T17:20:09.467Z"
             },
             "references": [
                 {

data/2026/117xxx/CVE-2026-117373.json

@@ -0,0 +1,65 @@
+{
+    "dataType": "CVE_RECORD",
+    "cveMetadata": {
+        "state": "PUBLISHED",
+        "cveId": "CVE-2026-117373",
+        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
+        "assignerShortName": "mitre",
+        "dateUpdated": "2026-11-11T17:36:51.985Z",
+        "dateReserved": "2026-10-27T00:00:00.000Z",
+        "datePublished": "2026-11-11T00:00:00.000Z"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
+                "shortName": "mitre",
+                "dateUpdated": "2026-11-11T17:36:51.985Z"
+            },
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "Janus WebRTC Server 1.2.3 through 1.4.0 is vulnerable to Directory Traversal. The application accepts a caller supplied media path when an ondemand stream is created. The path is validated only by checking whether it contains one of the audio extensions and is then passed to the file source which opens it. No canonicalization is performed and no directory allowlist is enforced, so an unauthenticated caller can make the server open an arbitrary local file and use it as a media source, with the content delivered to viewers as RTP audio."
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "n/a",
+                    "product": "n/a",
+                    "versions": [
+                        {
+                            "version": "n/a",
+                            "status": "affected"
+                        }
+                    ]
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://github.com/meetecho/janus-gateway/pull/3637"
+                },
+                {
+                    "url": "https://github.com/meetecho/janus-gateway/pull/3676"
+                },
+                {
+                    "url": "https://github.com/meetecho/janus-gateway/releases/tag/v1.4.2"
+                },
+                {
+                    "url": "https://github.com/w1n0y/CVE"
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "type": "text",
+                            "lang": "en",
+                            "description": "n/a"
+                        }
+                    ]
+                }
+            ]
+        }
+    },
+    "dataVersion": "5.2"
+}

data/2026/118xxx/CVE-2026-118102.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.071Z",
         "datePublished": "2026-11-10T18:24:32.443Z",
-        "dateUpdated": "2026-11-11T11:51:21.443Z"
+        "dateUpdated": "2026-11-11T17:20:10.043Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:21.443Z"
+                "dateUpdated": "2026-11-11T17:20:10.043Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118103.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.072Z",
         "datePublished": "2026-11-10T18:24:33.058Z",
-        "dateUpdated": "2026-11-11T11:51:21.874Z"
+        "dateUpdated": "2026-11-11T17:20:10.652Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:21.874Z"
+                "dateUpdated": "2026-11-11T17:20:10.652Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118104.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.072Z",
         "datePublished": "2026-11-10T18:24:33.577Z",
-        "dateUpdated": "2026-11-11T11:51:22.303Z"
+        "dateUpdated": "2026-11-11T17:20:11.263Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:22.303Z"
+                "dateUpdated": "2026-11-11T17:20:11.263Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118105.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.072Z",
         "datePublished": "2026-11-10T18:24:34.113Z",
-        "dateUpdated": "2026-11-11T11:51:22.813Z"
+        "dateUpdated": "2026-11-11T17:20:11.746Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:22.813Z"
+                "dateUpdated": "2026-11-11T17:20:11.746Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118106.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.072Z",
         "datePublished": "2026-11-10T18:24:34.578Z",
-        "dateUpdated": "2026-11-11T11:51:23.320Z"
+        "dateUpdated": "2026-11-11T17:20:12.293Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:23.320Z"
+                "dateUpdated": "2026-11-11T17:20:12.293Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118108.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.072Z",
         "datePublished": "2026-11-10T18:24:35.103Z",
-        "dateUpdated": "2026-11-11T11:51:23.840Z"
+        "dateUpdated": "2026-11-11T17:20:12.830Z"
     },
     "containers": {
         "cna": {
@@ -206,10 +206,10 @@
                 {
                     "descriptions": [
                         {
-                            "description": "CWE-283: Unverified Ownership",
+                            "description": "CWE-863: Incorrect Authorization",
                             "lang": "en-US",
                             "type": "CWE",
-                            "cweId": "CWE-283"
+                            "cweId": "CWE-863"
                         }
                     ]
                 }
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:23.840Z"
+                "dateUpdated": "2026-11-11T17:20:12.830Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118109.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.072Z",
         "datePublished": "2026-11-10T18:24:35.707Z",
-        "dateUpdated": "2026-11-11T11:51:24.339Z"
+        "dateUpdated": "2026-11-11T17:20:13.283Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:24.339Z"
+                "dateUpdated": "2026-11-11T17:20:13.283Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118110.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.072Z",
         "datePublished": "2026-11-10T18:24:36.304Z",
-        "dateUpdated": "2026-11-11T11:51:24.840Z"
+        "dateUpdated": "2026-11-11T17:20:13.904Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:24.840Z"
+                "dateUpdated": "2026-11-11T17:20:13.904Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118111.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.072Z",
         "datePublished": "2026-11-10T18:24:36.756Z",
-        "dateUpdated": "2026-11-11T11:51:25.437Z"
+        "dateUpdated": "2026-11-11T17:20:14.650Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:25.437Z"
+                "dateUpdated": "2026-11-11T17:20:14.650Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118112.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.073Z",
         "datePublished": "2026-11-10T18:24:37.257Z",
-        "dateUpdated": "2026-11-11T11:51:25.963Z"
+        "dateUpdated": "2026-11-11T17:20:15.176Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:25.963Z"
+                "dateUpdated": "2026-11-11T17:20:15.176Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118113.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.073Z",
         "datePublished": "2026-11-10T18:24:37.769Z",
-        "dateUpdated": "2026-11-11T11:51:26.568Z"
+        "dateUpdated": "2026-11-11T17:20:15.724Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:26.568Z"
+                "dateUpdated": "2026-11-11T17:20:15.724Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118114.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.073Z",
         "datePublished": "2026-11-10T18:24:38.270Z",
-        "dateUpdated": "2026-11-11T11:51:27.000Z"
+        "dateUpdated": "2026-11-11T17:20:16.357Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:27.000Z"
+                "dateUpdated": "2026-11-11T17:20:16.357Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118115.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.073Z",
         "datePublished": "2026-11-10T18:24:38.851Z",
-        "dateUpdated": "2026-11-11T11:51:27.594Z"
+        "dateUpdated": "2026-11-11T17:20:16.917Z"
     },
     "containers": {
         "cna": {
@@ -175,7 +175,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:27.594Z"
+                "dateUpdated": "2026-11-11T17:20:16.917Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118116.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.073Z",
         "datePublished": "2026-11-10T18:24:40.256Z",
-        "dateUpdated": "2026-11-11T11:51:28.104Z"
+        "dateUpdated": "2026-11-11T17:20:17.495Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:28.104Z"
+                "dateUpdated": "2026-11-11T17:20:17.495Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118117.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.073Z",
         "datePublished": "2026-11-10T18:24:40.774Z",
-        "dateUpdated": "2026-11-11T11:51:28.698Z"
+        "dateUpdated": "2026-11-11T17:20:18.039Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:28.698Z"
+                "dateUpdated": "2026-11-11T17:20:18.039Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118118.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.073Z",
         "datePublished": "2026-11-10T18:24:41.361Z",
-        "dateUpdated": "2026-11-11T11:51:29.312Z"
+        "dateUpdated": "2026-11-11T17:20:18.545Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:29.312Z"
+                "dateUpdated": "2026-11-11T17:20:18.545Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118119.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.073Z",
         "datePublished": "2026-11-10T18:24:41.873Z",
-        "dateUpdated": "2026-11-11T11:51:29.827Z"
+        "dateUpdated": "2026-11-11T17:20:19.079Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:29.827Z"
+                "dateUpdated": "2026-11-11T17:20:19.079Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118120.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T16:40:22.073Z",
         "datePublished": "2026-11-10T18:24:42.371Z",
-        "dateUpdated": "2026-11-11T11:51:30.410Z"
+        "dateUpdated": "2026-11-11T17:20:19.610Z"
     },
     "containers": {
         "cna": {
@@ -217,7 +217,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:30.410Z"
+                "dateUpdated": "2026-11-11T17:20:19.610Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118148.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T17:35:36.728Z",
         "datePublished": "2026-11-10T18:24:43.000Z",
-        "dateUpdated": "2026-11-11T11:51:31.002Z"
+        "dateUpdated": "2026-11-11T17:20:20.119Z"
     },
     "containers": {
         "cna": {
@@ -416,7 +416,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:31.002Z"
+                "dateUpdated": "2026-11-11T17:20:20.119Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118288.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.656Z",
         "datePublished": "2026-11-10T18:24:14.589Z",
-        "dateUpdated": "2026-11-11T11:51:04.376Z"
+        "dateUpdated": "2026-11-11T17:19:51.683Z"
     },
     "containers": {
         "cna": {
@@ -106,7 +106,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:04.376Z"
+                "dateUpdated": "2026-11-11T17:19:51.683Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118292.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.656Z",
         "datePublished": "2026-11-10T18:24:43.606Z",
-        "dateUpdated": "2026-11-11T11:51:31.600Z"
+        "dateUpdated": "2026-11-11T17:20:20.638Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:31.600Z"
+                "dateUpdated": "2026-11-11T17:20:20.638Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118293.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.656Z",
         "datePublished": "2026-11-10T18:24:44.148Z",
-        "dateUpdated": "2026-11-11T11:51:32.102Z"
+        "dateUpdated": "2026-11-11T17:20:21.235Z"
     },
     "containers": {
         "cna": {
@@ -193,7 +193,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:32.102Z"
+                "dateUpdated": "2026-11-11T17:20:21.235Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118294.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.656Z",
         "datePublished": "2026-11-10T18:24:44.743Z",
-        "dateUpdated": "2026-11-11T11:51:32.680Z"
+        "dateUpdated": "2026-11-11T17:20:21.853Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:32.680Z"
+                "dateUpdated": "2026-11-11T17:20:21.853Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118295.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.656Z",
         "datePublished": "2026-11-10T18:24:45.283Z",
-        "dateUpdated": "2026-11-11T11:51:33.284Z"
+        "dateUpdated": "2026-11-11T17:20:22.367Z"
     },
     "containers": {
         "cna": {
@@ -193,7 +193,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:33.284Z"
+                "dateUpdated": "2026-11-11T17:20:22.367Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118296.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.656Z",
         "datePublished": "2026-11-10T18:24:45.874Z",
-        "dateUpdated": "2026-11-11T11:51:33.865Z"
+        "dateUpdated": "2026-11-11T17:20:22.887Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:33.865Z"
+                "dateUpdated": "2026-11-11T17:20:22.887Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118297.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.656Z",
         "datePublished": "2026-11-10T18:24:46.389Z",
-        "dateUpdated": "2026-11-11T11:51:34.367Z"
+        "dateUpdated": "2026-11-11T17:20:23.367Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:34.367Z"
+                "dateUpdated": "2026-11-11T17:20:23.367Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118298.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.656Z",
         "datePublished": "2026-11-10T18:24:46.960Z",
-        "dateUpdated": "2026-11-11T11:51:34.877Z"
+        "dateUpdated": "2026-11-11T17:20:23.867Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:34.877Z"
+                "dateUpdated": "2026-11-11T17:20:23.867Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118299.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.657Z",
         "datePublished": "2026-11-10T18:24:47.539Z",
-        "dateUpdated": "2026-11-11T11:51:35.466Z"
+        "dateUpdated": "2026-11-11T17:20:24.412Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:35.466Z"
+                "dateUpdated": "2026-11-11T17:20:24.412Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118300.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.657Z",
         "datePublished": "2026-11-10T18:24:47.990Z",
-        "dateUpdated": "2026-11-11T11:51:36.035Z"
+        "dateUpdated": "2026-11-11T17:20:24.992Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:36.035Z"
+                "dateUpdated": "2026-11-11T17:20:24.992Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118301.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.657Z",
         "datePublished": "2026-11-10T18:24:48.517Z",
-        "dateUpdated": "2026-11-11T11:51:36.476Z"
+        "dateUpdated": "2026-11-11T17:20:25.606Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:36.476Z"
+                "dateUpdated": "2026-11-11T17:20:25.606Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118302.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-27T21:05:24.657Z",
         "datePublished": "2026-11-10T18:24:49.028Z",
-        "dateUpdated": "2026-11-11T11:51:36.919Z"
+        "dateUpdated": "2026-11-11T17:20:26.041Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:36.919Z"
+                "dateUpdated": "2026-11-11T17:20:26.041Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118700.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.603Z",
         "datePublished": "2026-11-10T18:24:49.541Z",
-        "dateUpdated": "2026-11-11T11:51:37.453Z"
+        "dateUpdated": "2026-11-11T17:20:26.503Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:37.453Z"
+                "dateUpdated": "2026-11-11T17:20:26.503Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118701.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:49.993Z",
-        "dateUpdated": "2026-11-11T11:51:37.967Z"
+        "dateUpdated": "2026-11-11T17:20:26.953Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:37.967Z"
+                "dateUpdated": "2026-11-11T17:20:26.953Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118702.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:50.522Z",
-        "dateUpdated": "2026-11-11T11:51:38.590Z"
+        "dateUpdated": "2026-11-11T17:20:27.472Z"
     },
     "containers": {
         "cna": {
@@ -169,7 +169,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:38.590Z"
+                "dateUpdated": "2026-11-11T17:20:27.472Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118703.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:50.975Z",
-        "dateUpdated": "2026-11-11T11:51:39.119Z"
+        "dateUpdated": "2026-11-11T17:20:28.072Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:39.119Z"
+                "dateUpdated": "2026-11-11T17:20:28.072Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118704.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:51.485Z",
-        "dateUpdated": "2026-11-11T11:51:39.629Z"
+        "dateUpdated": "2026-11-11T17:20:28.612Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:39.629Z"
+                "dateUpdated": "2026-11-11T17:20:28.612Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118705.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:51.940Z",
-        "dateUpdated": "2026-11-11T11:51:40.133Z"
+        "dateUpdated": "2026-11-11T17:20:29.211Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:40.133Z"
+                "dateUpdated": "2026-11-11T17:20:29.211Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118706.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:52.374Z",
-        "dateUpdated": "2026-11-11T11:51:40.636Z"
+        "dateUpdated": "2026-11-11T17:20:29.735Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:40.636Z"
+                "dateUpdated": "2026-11-11T17:20:29.735Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118707.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:52.883Z",
-        "dateUpdated": "2026-11-11T11:51:41.141Z"
+        "dateUpdated": "2026-11-11T17:20:30.248Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:41.141Z"
+                "dateUpdated": "2026-11-11T17:20:30.248Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118708.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:53.315Z",
-        "dateUpdated": "2026-11-11T11:51:41.673Z"
+        "dateUpdated": "2026-11-11T17:20:30.683Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:41.673Z"
+                "dateUpdated": "2026-11-11T17:20:30.683Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118709.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:53.773Z",
-        "dateUpdated": "2026-11-11T11:51:43.937Z"
+        "dateUpdated": "2026-11-11T17:20:31.186Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:43.937Z"
+                "dateUpdated": "2026-11-11T17:20:31.186Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118710.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:54.284Z",
-        "dateUpdated": "2026-11-11T11:51:44.863Z"
+        "dateUpdated": "2026-11-11T17:20:31.759Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:44.863Z"
+                "dateUpdated": "2026-11-11T17:20:31.759Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118711.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:54.798Z",
-        "dateUpdated": "2026-11-11T11:51:45.432Z"
+        "dateUpdated": "2026-11-11T17:20:32.339Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:45.432Z"
+                "dateUpdated": "2026-11-11T17:20:32.339Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118712.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.604Z",
         "datePublished": "2026-11-10T18:24:55.312Z",
-        "dateUpdated": "2026-11-11T11:51:46.018Z"
+        "dateUpdated": "2026-11-11T17:20:32.791Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:46.018Z"
+                "dateUpdated": "2026-11-11T17:20:32.791Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118713.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.605Z",
         "datePublished": "2026-11-10T18:24:55.759Z",
-        "dateUpdated": "2026-11-11T11:51:46.672Z"
+        "dateUpdated": "2026-11-11T17:20:33.389Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:46.672Z"
+                "dateUpdated": "2026-11-11T17:20:33.389Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118714.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.605Z",
         "datePublished": "2026-11-10T18:24:56.346Z",
-        "dateUpdated": "2026-11-11T11:51:47.219Z"
+        "dateUpdated": "2026-11-11T17:20:33.970Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:47.219Z"
+                "dateUpdated": "2026-11-11T17:20:33.970Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118715.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.605Z",
         "datePublished": "2026-11-10T18:24:56.866Z",
-        "dateUpdated": "2026-11-11T11:51:47.845Z"
+        "dateUpdated": "2026-11-11T17:20:34.482Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:47.845Z"
+                "dateUpdated": "2026-11-11T17:20:34.482Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118716.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.605Z",
         "datePublished": "2026-11-10T18:24:57.452Z",
-        "dateUpdated": "2026-11-11T11:51:48.485Z"
+        "dateUpdated": "2026-11-11T17:20:35.024Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:48.485Z"
+                "dateUpdated": "2026-11-11T17:20:35.024Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118717.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.605Z",
         "datePublished": "2026-11-10T18:24:57.976Z",
-        "dateUpdated": "2026-11-11T11:51:48.950Z"
+        "dateUpdated": "2026-11-11T17:20:35.475Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:48.950Z"
+                "dateUpdated": "2026-11-11T17:20:35.475Z"
             },
             "references": [
                 {

data/2026/118xxx/CVE-2026-118718.json

@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2026-10-28T19:02:36.605Z",
         "datePublished": "2026-11-10T18:24:58.509Z",
-        "dateUpdated": "2026-11-11T11:51:49.450Z"
+        "dateUpdated": "2026-11-11T17:20:36.089Z"
     },
     "containers": {
         "cna": {
@@ -187,7 +187,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2026-11-11T11:51:49.450Z"
+                "dateUpdated": "2026-11-11T17:20:36.089Z"
             },
             "references": [
                 {