VULN/vuln-cve
1
0
Fork 0
Code Pull Requests Actions Activity

CVE sync 2026-11-11T04:38:23Z

Browse Source
This commit is contained in:
Vulnerability Bot
2026-11-11 05:38:28 +01:00
parent e51fce875d
commit 80d2b24cc8
67 changed files with 3498 additions and 321 deletions
Download Patch File Download Diff File Expand all files Collapse all files
data/2025/55xxx/CVE-2025-55002.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2025-08-04T17:34:24.421Z",
"datePublished": "2026-11-06T20:32:37.521Z",
"dateUpdated": "2026-11-06T20:32:37.521Z"
"dateUpdated": "2026-11-11T03:29:50.069Z"
},
"containers": {
"cna": {
@@ -113,6 +113,40 @@
"advisory": "GHSA-5c3f-5gj7-p9xh",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:29:38.969959Z",
"id": "CVE-2025-55002",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:29:50.069Z"
}
}
]
}
}
data/2026/102xxx/CVE-2026-102657.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-09-29T15:56:02.101Z",
"datePublished": "2026-11-06T20:49:28.708Z",
"dateUpdated": "2026-11-06T20:49:28.708Z"
"dateUpdated": "2026-11-11T03:30:44.632Z"
},
"containers": {
"cna": {
@@ -107,6 +107,48 @@
"advisory": "GHSA-g3c2-rjq2-c763",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/esm-dev/esm.sh/security/advisories/GHSA-g3c2-rjq2-c763",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:30:20.973915Z",
"id": "CVE-2026-102657",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:30:44.632Z"
}
}
]
}
}
data/2026/103xxx/CVE-2026-103022.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-09-29T21:13:24.031Z",
"datePublished": "2026-11-06T21:33:37.028Z",
"dateUpdated": "2026-11-06T21:33:37.028Z"
"dateUpdated": "2026-11-11T03:39:17.860Z"
},
"containers": {
"cna": {
@@ -120,6 +120,40 @@
"advisory": "GHSA-cp25-j9x5-p5xm",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:39:06.834605Z",
"id": "CVE-2026-103022",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:39:17.860Z"
}
}
]
}
}
data/2026/104xxx/CVE-2026-104267.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-10-01T19:04:39.707Z",
"datePublished": "2026-11-06T21:25:42.417Z",
"dateUpdated": "2026-11-06T21:25:42.417Z"
"dateUpdated": "2026-11-11T03:38:32.723Z"
},
"containers": {
"cna": {
@@ -96,6 +96,40 @@
"advisory": "GHSA-36rp-hhp4-wh83",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:38:20.231461Z",
"id": "CVE-2026-104267",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:38:32.723Z"
}
}
]
}
}
data/2026/108xxx/CVE-2026-108178.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-10-09T16:47:17.019Z",
"datePublished": "2026-11-07T04:31:16.464Z",
"dateUpdated": "2026-11-07T04:31:16.464Z"
"dateUpdated": "2026-11-11T03:39:48.143Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:39:36.571727Z",
"id": "CVE-2026-108178",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:39:48.143Z"
}
}
]
}
}
data/2026/119xxx/CVE-2026-119494.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Patchstack",
"dateReserved": "2026-10-30T09:20:18.655Z",
"datePublished": "2026-11-07T10:08:28.998Z",
"dateUpdated": "2026-11-07T10:09:29.820Z"
"dateUpdated": "2026-11-11T03:56:16.622Z"
},
"containers": {
"cna": {
@@ -134,6 +134,40 @@
"tags": [
"x_open-source"
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:56:05.336656Z",
"id": "CVE-2026-119494",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:56:16.622Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120857.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Patchstack",
"dateReserved": "2026-11-03T00:24:21.838Z",
"datePublished": "2026-11-07T10:39:37.731Z",
"dateUpdated": "2026-11-07T10:40:37.937Z"
"dateUpdated": "2026-11-11T03:57:57.652Z"
},
"containers": {
"cna": {
@@ -134,6 +134,40 @@
"tags": [
"x_open-source"
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:57:47.540784Z",
"id": "CVE-2026-120857",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:57:57.652Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123495.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-06T00:45:39.025Z",
"datePublished": "2026-11-08T01:37:13.573Z",
"dateUpdated": "2026-11-08T01:37:13.573Z"
"dateUpdated": "2026-11-11T04:05:04.826Z"
},
"containers": {
"cna": {
@@ -134,6 +134,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T04:04:53.634116Z",
"id": "CVE-2026-123495",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T04:05:04.826Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123499.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-06T00:45:39.026Z",
"datePublished": "2026-11-08T01:37:16.315Z",
"dateUpdated": "2026-11-08T01:37:16.315Z"
"dateUpdated": "2026-11-11T04:05:52.242Z"
},
"containers": {
"cna": {
@@ -133,6 +133,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T04:05:41.244401Z",
"id": "CVE-2026-123499",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T04:05:52.242Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123503.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-06T00:45:39.026Z",
"datePublished": "2026-11-08T01:37:19.068Z",
"dateUpdated": "2026-11-08T01:37:19.068Z"
"dateUpdated": "2026-11-11T04:06:33.979Z"
},
"containers": {
"cna": {
@@ -140,6 +140,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T04:06:24.336617Z",
"id": "CVE-2026-123503",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T04:06:33.979Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123788.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulDB",
"dateReserved": "2026-11-06T14:44:36.840Z",
"datePublished": "2026-11-06T21:15:17.807Z",
"dateUpdated": "2026-11-06T21:15:17.807Z"
"dateUpdated": "2026-11-11T03:36:37.238Z"
},
"containers": {
"cna": {
@@ -217,6 +217,48 @@
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/chenyme/grok2api/issues/1072",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:35:54.231283Z",
"id": "CVE-2026-123788",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:36:37.238Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123958.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulDB",
"dateReserved": "2026-11-06T17:07:15.460Z",
"datePublished": "2026-11-07T09:00:21.640Z",
"dateUpdated": "2026-11-07T09:00:21.640Z"
"dateUpdated": "2026-11-11T03:55:42.848Z"
},
"containers": {
"cna": {
@@ -165,6 +165,40 @@
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:55:32.276607Z",
"id": "CVE-2026-123958",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:55:42.848Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123963.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulDB",
"dateReserved": "2026-11-06T17:12:27.519Z",
"datePublished": "2026-11-07T12:30:12.500Z",
"dateUpdated": "2026-11-07T12:30:12.500Z"
"dateUpdated": "2026-11-11T03:58:38.261Z"
},
"containers": {
"cna": {
@@ -168,6 +168,40 @@
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:58:28.605155Z",
"id": "CVE-2026-123963",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:58:38.261Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123989.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulDB",
"dateReserved": "2026-11-06T18:14:31.830Z",
"datePublished": "2026-11-07T15:00:22.841Z",
"dateUpdated": "2026-11-07T15:00:22.841Z"
"dateUpdated": "2026-11-11T04:03:17.507Z"
},
"containers": {
"cna": {
@@ -326,6 +326,40 @@
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T04:03:07.445652Z",
"id": "CVE-2026-123989",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T04:03:17.507Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123995.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-06T18:38:38.542Z",
"datePublished": "2026-11-06T18:57:06.574Z",
"dateUpdated": "2026-11-06T18:57:06.574Z"
"dateUpdated": "2026-11-11T03:19:46.980Z"
},
"containers": {
"cna": {
@@ -142,6 +142,40 @@
"x_generator": {
"engine": "vulncheck"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:19:35.902736Z",
"id": "CVE-2026-123995",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:19:46.980Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124025.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-06T18:51:26.462Z",
"datePublished": "2026-11-06T19:14:43.649Z",
"dateUpdated": "2026-11-06T19:14:43.649Z"
"dateUpdated": "2026-11-11T03:22:20.366Z"
},
"containers": {
"cna": {
@@ -166,6 +166,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:22:10.637675Z",
"id": "CVE-2026-124025",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:22:20.366Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124029.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-06T18:51:27.887Z",
"datePublished": "2026-11-06T19:14:46.245Z",
"dateUpdated": "2026-11-06T19:14:46.245Z"
"dateUpdated": "2026-11-11T03:24:01.593Z"
},
"containers": {
"cna": {
@@ -130,6 +130,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/kopia/kopia/issues/5700",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:23:39.213746Z",
"id": "CVE-2026-124029",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:24:01.593Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124040.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-06T19:11:14.928Z",
"datePublished": "2026-11-06T19:14:48.975Z",
"dateUpdated": "2026-11-06T19:14:48.975Z"
"dateUpdated": "2026-11-11T03:24:56.121Z"
},
"containers": {
"cna": {
@@ -151,6 +151,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:24:46.139383Z",
"id": "CVE-2026-124040",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:24:56.121Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124057.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulDB",
"dateReserved": "2026-11-06T19:53:48.220Z",
"datePublished": "2026-11-07T17:45:21.624Z",
"dateUpdated": "2026-11-07T17:45:21.624Z"
"dateUpdated": "2026-11-11T04:04:19.822Z"
},
"containers": {
"cna": {
@@ -165,6 +165,40 @@
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T04:04:08.465002Z",
"id": "CVE-2026-124057",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T04:04:19.822Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124309.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-07T12:24:19.492Z",
"datePublished": "2026-11-07T14:17:51.711Z",
"dateUpdated": "2026-11-07T14:17:51.711Z"
"dateUpdated": "2026-11-11T03:59:43.169Z"
},
"containers": {
"cna": {
@@ -147,6 +147,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:59:33.484890Z",
"id": "CVE-2026-124309",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:59:43.169Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124313.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-07T12:25:24.159Z",
"datePublished": "2026-11-07T14:17:54.437Z",
"dateUpdated": "2026-11-07T14:17:54.437Z"
"dateUpdated": "2026-11-11T04:01:32.154Z"
},
"containers": {
"cna": {
@@ -197,6 +197,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T04:01:18.974876Z",
"id": "CVE-2026-124313",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T04:01:32.154Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124317.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-07T12:27:50.865Z",
"datePublished": "2026-11-07T14:17:57.180Z",
"dateUpdated": "2026-11-07T14:17:57.180Z"
"dateUpdated": "2026-11-11T04:02:24.741Z"
},
"containers": {
"cna": {
@@ -153,6 +153,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T04:02:14.991976Z",
"id": "CVE-2026-124317",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T04:02:24.741Z"
}
}
]
}
}
data/2026/16xxx/CVE-2026-16884.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-24T04:54:38.847Z",
"datePublished": "2026-11-07T04:31:32.122Z",
"dateUpdated": "2026-11-07T04:31:32.122Z"
"dateUpdated": "2026-11-11T03:40:26.186Z"
},
"containers": {
"cna": {
@@ -101,6 +101,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:40:15.819637Z",
"id": "CVE-2026-16884",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:40:26.186Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17062.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-24T13:49:24.888Z",
"datePublished": "2026-11-07T04:31:37.336Z",
"dateUpdated": "2026-11-07T04:31:37.336Z"
"dateUpdated": "2026-11-11T03:41:01.200Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:40:51.538436Z",
"id": "CVE-2026-17062",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:41:01.200Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17146.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-24T17:29:47.775Z",
"datePublished": "2026-11-07T04:32:00.858Z",
"dateUpdated": "2026-11-07T04:32:00.858Z"
"dateUpdated": "2026-11-11T03:41:32.000Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:41:21.466914Z",
"id": "CVE-2026-17146",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:41:32.000Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17190.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-24T19:02:31.986Z",
"datePublished": "2026-11-07T04:32:11.130Z",
"dateUpdated": "2026-11-07T04:32:11.130Z"
"dateUpdated": "2026-11-11T03:42:11.342Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:42:00.119807Z",
"id": "CVE-2026-17190",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:42:11.342Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17225.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-24T20:24:36.286Z",
"datePublished": "2026-11-07T04:32:16.334Z",
"dateUpdated": "2026-11-07T04:32:16.334Z"
"dateUpdated": "2026-11-11T03:42:56.593Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:42:45.999638Z",
"id": "CVE-2026-17225",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:42:56.593Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17233.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-24T20:44:29.022Z",
"datePublished": "2026-11-07T04:32:21.463Z",
"dateUpdated": "2026-11-07T04:32:21.463Z"
"dateUpdated": "2026-11-11T03:44:12.772Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:44:00.513946Z",
"id": "CVE-2026-17233",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:44:12.772Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17240.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-24T20:59:23.640Z",
"datePublished": "2026-11-07T04:32:26.666Z",
"dateUpdated": "2026-11-07T04:32:26.666Z"
"dateUpdated": "2026-11-11T03:44:40.095Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:44:31.254601Z",
"id": "CVE-2026-17240",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:44:40.095Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17280.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T00:04:24.188Z",
"datePublished": "2026-11-07T04:32:31.975Z",
"dateUpdated": "2026-11-07T04:32:31.975Z"
"dateUpdated": "2026-11-11T03:45:09.625Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:44:56.485517Z",
"id": "CVE-2026-17280",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:45:09.625Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17291.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T00:33:32.997Z",
"datePublished": "2026-11-07T04:32:43.618Z",
"dateUpdated": "2026-11-07T04:32:43.618Z"
"dateUpdated": "2026-11-11T03:45:38.756Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:45:28.898639Z",
"id": "CVE-2026-17291",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:45:38.756Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17296.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T00:45:44.915Z",
"datePublished": "2026-11-07T04:32:48.775Z",
"dateUpdated": "2026-11-07T04:32:48.775Z"
"dateUpdated": "2026-11-11T03:46:07.229Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:45:56.182967Z",
"id": "CVE-2026-17296",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:46:07.229Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17312.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T01:28:32.431Z",
"datePublished": "2026-11-07T04:33:04.239Z",
"dateUpdated": "2026-11-07T04:33:04.239Z"
"dateUpdated": "2026-11-11T03:46:35.158Z"
},
"containers": {
"cna": {
@@ -101,6 +101,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:46:25.742978Z",
"id": "CVE-2026-17312",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:46:35.158Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17317.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T01:45:16.470Z",
"datePublished": "2026-11-07T04:33:09.538Z",
"dateUpdated": "2026-11-07T04:33:09.538Z"
"dateUpdated": "2026-11-11T03:47:10.261Z"
},
"containers": {
"cna": {
@@ -101,6 +101,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:46:57.587183Z",
"id": "CVE-2026-17317",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:47:10.261Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17322.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T01:58:07.214Z",
"datePublished": "2026-11-07T04:33:14.685Z",
"dateUpdated": "2026-11-07T04:33:14.685Z"
"dateUpdated": "2026-11-11T03:47:45.513Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:47:34.952304Z",
"id": "CVE-2026-17322",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:47:45.513Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17327.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T02:09:42.869Z",
"datePublished": "2026-11-07T04:33:19.844Z",
"dateUpdated": "2026-11-07T04:33:19.844Z"
"dateUpdated": "2026-11-11T03:48:34.546Z"
},
"containers": {
"cna": {
@@ -101,6 +101,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:48:24.332008Z",
"id": "CVE-2026-17327",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:48:34.546Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17332.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T02:21:08.612Z",
"datePublished": "2026-11-07T04:33:24.879Z",
"dateUpdated": "2026-11-07T04:33:24.879Z"
"dateUpdated": "2026-11-11T03:49:01.799Z"
},
"containers": {
"cna": {
@@ -101,6 +101,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:48:52.073815Z",
"id": "CVE-2026-17332",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:49:01.799Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17337.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T02:33:32.504Z",
"datePublished": "2026-11-07T04:33:29.970Z",
"dateUpdated": "2026-11-07T04:33:29.970Z"
"dateUpdated": "2026-11-11T03:49:56.806Z"
},
"containers": {
"cna": {
@@ -101,6 +101,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:49:45.245463Z",
"id": "CVE-2026-17337",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:49:56.806Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17353.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T02:56:26.715Z",
"datePublished": "2026-11-07T04:33:40.164Z",
"dateUpdated": "2026-11-07T04:33:40.164Z"
"dateUpdated": "2026-11-11T03:50:26.994Z"
},
"containers": {
"cna": {
@@ -101,6 +101,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:50:17.112902Z",
"id": "CVE-2026-17353",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:50:26.994Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17358.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T03:10:20.422Z",
"datePublished": "2026-11-07T04:33:45.939Z",
"dateUpdated": "2026-11-07T04:33:45.939Z"
"dateUpdated": "2026-11-11T03:51:54.428Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:51:44.958414Z",
"id": "CVE-2026-17358",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:51:54.428Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17365.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T03:27:26.036Z",
"datePublished": "2026-11-07T04:33:52.142Z",
"dateUpdated": "2026-11-07T04:33:52.142Z"
"dateUpdated": "2026-11-11T03:52:25.218Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:52:14.753510Z",
"id": "CVE-2026-17365",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:52:25.218Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17370.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T03:45:42.748Z",
"datePublished": "2026-11-07T04:33:57.250Z",
"dateUpdated": "2026-11-07T04:33:57.250Z"
"dateUpdated": "2026-11-11T03:52:56.272Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:52:46.374748Z",
"id": "CVE-2026-17370",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:52:56.272Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17380.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T04:08:10.623Z",
"datePublished": "2026-11-07T04:34:07.511Z",
"dateUpdated": "2026-11-07T04:34:07.511Z"
"dateUpdated": "2026-11-11T03:53:26.397Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:53:15.715172Z",
"id": "CVE-2026-17380",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:53:26.397Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17384.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T04:17:13.780Z",
"datePublished": "2026-11-07T04:40:55.983Z",
"dateUpdated": "2026-11-07T04:40:55.983Z"
"dateUpdated": "2026-11-11T03:54:44.432Z"
},
"containers": {
"cna": {
@@ -101,6 +101,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:54:33.909594Z",
"id": "CVE-2026-17384",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:54:44.432Z"
}
}
]
}
}
data/2026/17xxx/CVE-2026-17398.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "ibm",
"dateReserved": "2026-07-25T04:50:38.548Z",
"datePublished": "2026-11-07T04:34:22.709Z",
"dateUpdated": "2026-11-07T04:34:22.709Z"
"dateUpdated": "2026-11-11T03:54:11.917Z"
},
"containers": {
"cna": {
@@ -116,6 +116,40 @@
}
],
"title": "Multiple Vulnerabilities in IBM API Connect"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:54:02.635525Z",
"id": "CVE-2026-17398",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:54:11.917Z"
}
}
]
}
}
data/2026/26xxx/CVE-2026-26248.json
+3 -3
View File
@@ -8,7 +8,7 @@
"assignerShortName": "fortinet",
"dateReserved": "2026-02-12T12:07:02.132Z",
"datePublished": "2026-11-10T20:10:39.645Z",
"dateUpdated": "2026-11-10T20:10:39.645Z"
"dateUpdated": "2026-11-11T03:55:44.333Z"
},
"containers": {
"cna": {
@@ -101,13 +101,13 @@
"descriptions": [
{
"lang": "en",
"value": "A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to perform an XSS attack via social engineering and crafted HTTP requests."
"value": "A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to perform an XSS attack via social engineering and crafted HTTP requests."
}
],
"providerMetadata": {
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
"shortName": "fortinet",
"dateUpdated": "2026-11-10T20:10:39.645Z"
"dateUpdated": "2026-11-11T03:55:44.333Z"
},
"problemTypes": [
{
data/2026/46xxx/CVE-2026-46429.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-05-13T22:18:22.830Z",
"datePublished": "2026-11-06T19:40:54.131Z",
"dateUpdated": "2026-11-06T19:40:54.131Z"
"dateUpdated": "2026-11-11T03:25:47.093Z"
},
"containers": {
"cna": {
@@ -114,6 +114,40 @@
"advisory": "GHSA-fqpv-mq26-pr4j",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:25:34.772287Z",
"id": "CVE-2026-46429",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:25:47.093Z"
}
}
]
}
}
data/2026/54xxx/CVE-2026-54589.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-06-15T19:15:27.345Z",
"datePublished": "2026-11-06T21:03:30.050Z",
"dateUpdated": "2026-11-06T21:03:30.050Z"
"dateUpdated": "2026-11-11T03:32:46.255Z"
},
"containers": {
"cna": {
@@ -96,6 +96,48 @@
"advisory": "GHSA-6m7q-jmp7-3vw8",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-6m7q-jmp7-3vw8",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:32:23.316837Z",
"id": "CVE-2026-54589",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:32:46.255Z"
}
}
]
}
}
data/2026/59xxx/CVE-2026-59171.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-02T16:50:27.888Z",
"datePublished": "2026-11-06T20:12:34.624Z",
"dateUpdated": "2026-11-06T20:12:34.624Z"
"dateUpdated": "2026-11-11T03:27:27.596Z"
},
"containers": {
"cna": {
@@ -131,6 +131,48 @@
"advisory": "GHSA-ghc9-756g-vrcv",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/stleary/JSON-java/security/advisories/GHSA-ghc9-756g-vrcv",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:27:02.959510Z",
"id": "CVE-2026-59171",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:27:27.596Z"
}
}
]
}
}
data/2026/61xxx/CVE-2026-61810.json
+94
View File
@@ -0,0 +1,94 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-61810",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-10T20:17:57.991Z",
"datePublished": "2026-11-11T04:16:28.714Z",
"dateUpdated": "2026-11-11T04:16:28.714Z"
},
"containers": {
"cna": {
"title": "libspdm: SPDM (DSP0274) FINISH transcript under-specifies the new 1.4 OpaqueData fields",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-325",
"lang": "en",
"description": "CWE-325: Missing Cryptographic Step",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"references": [
{
"name": "https://github.com/DMTF/libspdm/security/advisories/GHSA-chjj-xvqx-c8w4",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/DMTF/libspdm/security/advisories/GHSA-chjj-xvqx-c8w4"
},
{
"name": "https://github.com/DMTF/libspdm/issues/3633",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/DMTF/libspdm/issues/3633"
}
],
"affected": [
{
"vendor": "DMTF",
"product": "libspdm",
"versions": [
{
"version": "= 1.4.0",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-11T04:16:28.714Z"
},
"descriptions": [
{
"lang": "en",
"value": "libspdm is a sample implementation that follows the DMTF SPDM specifications. In version 1.4.0, both the FINISH request (Table 80) and the FINISH_RSP response (Table 81) gained two new fields, OpaqueDataLength and OpaqueData, placed before the trailing signed/authenticated field. The transcript definitions used to compute and verify the FINISH signature, the FINISH HMAC (RequesterVerifyData), and the FINISH_RSP HMAC (ResponderVerifyData) were not updated and still terminate with a step of the form. Per DSP0274, the \"SPDM Header Fields\" are only the four header bytes (SPDMVersion, RequestResponseCode, Param1, Param2). A literal reading therefore excludes OpaqueDataLength and OpaqueData, even though those fields are transmitted before the trailing signature/HMAC field. Because the signature/HMAC must cover every field transmitted before it to \"protect the entire handshake against manipulation by an active attacker,\" an active attacker could otherwise modify the opaque data in flight without invalidating the signature or HMAC. This issue has been patched in version 1.4.1."
}
],
"source": {
"advisory": "GHSA-chjj-xvqx-c8w4",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/63xxx/CVE-2026-63440.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-16T19:35:57.767Z",
"datePublished": "2026-11-06T20:18:43.907Z",
"dateUpdated": "2026-11-06T20:18:43.907Z"
"dateUpdated": "2026-11-11T03:28:42.896Z"
},
"containers": {
"cna": {
@@ -103,6 +103,48 @@
"advisory": "GHSA-22mh-gmrh-gpwg",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/Bubka/2FAuth/security/advisories/GHSA-22mh-gmrh-gpwg",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:28:14.595265Z",
"id": "CVE-2026-63440",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:28:42.896Z"
}
}
]
}
}
data/2026/63xxx/CVE-2026-63663.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-17T14:47:08.031Z",
"datePublished": "2026-11-06T20:07:41.007Z",
"dateUpdated": "2026-11-06T20:07:41.007Z"
"dateUpdated": "2026-11-11T03:26:33.424Z"
},
"containers": {
"cna": {
@@ -93,6 +93,40 @@
"advisory": "GHSA-8wr4-mh28-m992",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:26:23.098498Z",
"id": "CVE-2026-63663",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:26:33.424Z"
}
}
]
}
}
data/2026/64xxx/CVE-2026-64666.json
+112
View File
@@ -0,0 +1,112 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64666",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-20T17:12:12.891Z",
"datePublished": "2026-11-11T03:51:12.232Z",
"dateUpdated": "2026-11-11T03:51:12.232Z"
},
"containers": {
"cna": {
"title": "pam_usb: getenv() in pusb_local_login bypasses XRDP deny via env-var unset",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-807",
"lang": "en",
"description": "CWE-807: Reliance on Untrusted Inputs in a Security Decision",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-ffx6-xjp6-x33g",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-ffx6-xjp6-x33g"
},
{
"name": "https://github.com/mcdope/pam_usb/issues/410",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/issues/410"
},
{
"name": "https://github.com/mcdope/pam_usb/pull/417",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/pull/417"
},
{
"name": "https://github.com/mcdope/pam_usb/commit/0b179ed679d6522c6a571c5a8ae9bdc7edbad31f",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/commit/0b179ed679d6522c6a571c5a8ae9bdc7edbad31f"
},
{
"name": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3"
}
],
"affected": [
{
"vendor": "mcdope",
"product": "pam_usb",
"versions": [
{
"version": "< 0.9.3",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-11T03:51:12.232Z"
},
"descriptions": [
{
"lang": "en",
"value": "pam_usb provides hardware authentication for Linux using removable media. Prior to version 0.9.3, src/local.c reads XRDP_SESSION with plain getenv(3) at the head of pusb_local_login while every other env consumer in the same function uses secure_getenv(3). When pam_usb.so loads into a setuid PAM host, the calling user controls the environment passed in. Clearing XRDP_SESSION before invoking the host bypasses the explicit XRDP-deny rule. Other remote-detection signals (rmsvc, evdev, loginctl, utmp) may still catch the session, but the env-based detection alone is defeated. This issue has been patched in version 0.9.3."
}
],
"source": {
"advisory": "GHSA-ffx6-xjp6-x33g",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/64xxx/CVE-2026-64667.json
+112
View File
@@ -0,0 +1,112 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64667",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-20T17:12:12.891Z",
"datePublished": "2026-11-11T03:51:59.164Z",
"dateUpdated": "2026-11-11T03:51:59.164Z"
},
"containers": {
"cna": {
"title": "pam_usb: Heap out-of-bounds read in pusb_get_tty_from_display_server cmdline scan",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"lang": "en",
"description": "CWE-125: Out-of-bounds Read",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-gc6f-5hpq-ghxh",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-gc6f-5hpq-ghxh"
},
{
"name": "https://github.com/mcdope/pam_usb/issues/411",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/issues/411"
},
{
"name": "https://github.com/mcdope/pam_usb/pull/426",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/pull/426"
},
{
"name": "https://github.com/mcdope/pam_usb/commit/d0a2e716241304cdb069adfaf54d2ede629d57fa",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/commit/d0a2e716241304cdb069adfaf54d2ede629d57fa"
},
{
"name": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3"
}
],
"affected": [
{
"vendor": "mcdope",
"product": "pam_usb",
"versions": [
{
"version": "< 0.9.3",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-11T03:51:59.164Z"
},
"descriptions": [
{
"lang": "en",
"value": "pam_usb provides hardware authentication for Linux using removable media. Prior to version 0.9.3, src/local.c (pusb_get_tty_from_display_server) allocates a 4096-byte cmdline buffer, reads up to 4096 bytes from /proc//cmdline, then replaces every NUL separator with a space. When read(2) returns exactly 4096 bytes for any process the function inspects, the buffer ends without a terminator and the subsequent strstr() calls scan past the allocation boundary. The function is invoked during normal PAM authentication when DISPLAY is set, so the read fires for every process at auth time. Consequences are bounded: strstr output is a Boolean substring match (limited info-disclosure surface) but a hostile heap layout can produce a SIGSEGV that terminates the host PAM process. This issue has been patched in version 0.9.3."
}
],
"source": {
"advisory": "GHSA-gc6f-5hpq-ghxh",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/64xxx/CVE-2026-64668.json
+115
View File
@@ -0,0 +1,115 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64668",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-20T17:12:12.891Z",
"datePublished": "2026-11-11T03:50:14.037Z",
"dateUpdated": "2026-11-11T03:50:14.037Z"
},
"containers": {
"cna": {
"title": "pam_usb: deny_remote bypassed by zone-indexed IPv6 addresses (fe80::1%eth0) in pusb_tmux_has_remote_clients",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"lang": "en",
"description": "CWE-285: Improper Authorization",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-693",
"lang": "en",
"description": "CWE-693: Protection Mechanism Failure",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-7583-9cqv-j9rf",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-7583-9cqv-j9rf"
},
{
"name": "https://github.com/mcdope/pam_usb/pull/423",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/pull/423"
},
{
"name": "https://github.com/mcdope/pam_usb/commit/a62513f3da871d6576d751de3482eb80b9ac79f3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/commit/a62513f3da871d6576d751de3482eb80b9ac79f3"
},
{
"name": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3"
}
],
"affected": [
{
"vendor": "mcdope",
"product": "pam_usb",
"versions": [
{
"version": ">= 0.8.0, < 0.9.3",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-11T03:50:14.037Z"
},
"descriptions": [
{
"lang": "en",
"value": "pam_usb provides hardware authentication for Linux using removable media. From version 0.8.0 to before version 0.9.3, the deny_remote feature in pam_usb uses /usr/bin/w -i to detect whether the authenticating user has an active remote tmux session. In pusb_tmux_has_remote_clients() (src/tmux.c), the IPv6 detection pattern matched the address group and then immediately expected whitespace. On Linux systems with multi-homed network interfaces, w -i appends a zone index (scope identifier) to link-local IPv6 addresses — e.g. fe80::1%eth0. The %eth0 suffix appeared between the address and the next whitespace field, causing the regex match to fail even for an otherwise-matching remote session. The function returned \"no remote clients\" and granted access. This issue has been patched in version 0.9.3."
}
],
"source": {
"advisory": "GHSA-7583-9cqv-j9rf",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/64xxx/CVE-2026-64669.json
+115
View File
@@ -0,0 +1,115 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64669",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-20T17:12:12.891Z",
"datePublished": "2026-11-11T03:52:43.930Z",
"dateUpdated": "2026-11-11T03:52:43.930Z"
},
"containers": {
"cna": {
"title": "pam_usb: deny_remote bypassed by compressed IPv6 addresses in pusb_tmux_has_remote_clients",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"lang": "en",
"description": "CWE-285: Improper Authorization",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-693",
"lang": "en",
"description": "CWE-693: Protection Mechanism Failure",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-gc4c-v52c-2v34",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-gc4c-v52c-2v34"
},
{
"name": "https://github.com/mcdope/pam_usb/pull/423",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/pull/423"
},
{
"name": "https://github.com/mcdope/pam_usb/commit/a62513f3da871d6576d751de3482eb80b9ac79f3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/commit/a62513f3da871d6576d751de3482eb80b9ac79f3"
},
{
"name": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3"
}
],
"affected": [
{
"vendor": "mcdope",
"product": "pam_usb",
"versions": [
{
"version": ">= 0.8.0, < 0.9.3",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-11T03:52:43.930Z"
},
"descriptions": [
{
"lang": "en",
"value": "pam_usb provides hardware authentication for Linux using removable media. From version 0.8.0 to before version 0.9.3, the deny_remote feature in pam_usb uses /usr/bin/w -i to detect whether the authenticating user has an active remote tmux session. In pusb_tmux_has_remote_clients() (src/tmux.c), the IPv6 detection regex required exactly four explicit colon-separated groups of 1-4 hex digits (e.g. 2001:0db8:85a3:0000). Any IPv6 address in compressed notation — including loopback (::1), link-local (fe80::1), and global unicast addresses (2001:db8::1) — did not match this pattern. As a result the remote-client check silently returned \"no remote clients\" even when a remote tmux client was connected from such an address. This issue has been patched in version 0.9.3."
}
],
"source": {
"advisory": "GHSA-gc4c-v52c-2v34",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/64xxx/CVE-2026-64670.json
+94
View File
@@ -0,0 +1,94 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64670",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-20T17:12:12.891Z",
"datePublished": "2026-11-11T03:42:22.276Z",
"dateUpdated": "2026-11-11T03:42:22.276Z"
},
"containers": {
"cna": {
"title": "Stored XSS in @waline/client via the unsanitized markdown preview of a comment's raw body on edit",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"lang": "en",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-116",
"lang": "en",
"description": "CWE-116: Improper Encoding or Escaping of Output",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/walinejs/waline/security/advisories/GHSA-crj3-q72p-ggqm",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/walinejs/waline/security/advisories/GHSA-crj3-q72p-ggqm"
}
],
"affected": [
{
"vendor": "walinejs",
"product": "waline",
"versions": [
{
"version": "<= 3.15.2",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-11T03:42:22.276Z"
},
"descriptions": [
{
"lang": "en",
"value": "Waline is a comment system with backend support. In versions 3.15.2 and prior, @waline/client renders the comment editor's live preview with marked and no sanitizer (utils/markdown.ts), and the preview is injected with v-html. When a comment is edited, the editor is seeded with the comment's raw, un-sanitized body (orig). Only administrators and the comment owner can edit. So an administrator who clicks Edit on an attacker's comment renders that attacker's raw HTML in their own session: an unauthenticated commenter achieves privilege-escalation stored XSS against a moderator with a single Edit click. At time of publication, there are no publicly available patches."
}
],
"source": {
"advisory": "GHSA-crj3-q72p-ggqm",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/64xxx/CVE-2026-64671.json
+94
View File
@@ -0,0 +1,94 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64671",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-20T17:12:12.891Z",
"datePublished": "2026-11-11T03:42:13.103Z",
"dateUpdated": "2026-11-11T03:42:13.103Z"
},
"containers": {
"cna": {
"title": "Stored XSS in the @waline/client UserList widget via an unescaped commenter link field",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"lang": "en",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-116",
"lang": "en",
"description": "CWE-116: Improper Encoding or Escaping of Output",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/walinejs/waline/security/advisories/GHSA-7w94-hxwm-gg99",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/walinejs/waline/security/advisories/GHSA-7w94-hxwm-gg99"
}
],
"affected": [
{
"vendor": "walinejs",
"product": "waline",
"versions": [
{
"version": "<= 3.15.2",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-11T03:42:13.103Z"
},
"descriptions": [
{
"lang": "en",
"value": "Waline is a comment system with backend support. In versions 3.15.2 and prior, the @waline/client UserList widget builds its DOM by concatenating server-returned commenter fields directly into root.innerHTML with no HTML escaping. The commenter nick and link are stored and returned verbatim by the server (only the comment body is sanitized), and the link field is never sent to the spam filter. So an unauthenticated visitor who posts a comment with link = x\"><img src=x onerror=...> achieves stored cross-site scripting that executes, with no interaction, in the browser of every visitor to a page that embeds the UserList widget. At time of publication, there are no publicly available patches."
}
],
"source": {
"advisory": "GHSA-7w94-hxwm-gg99",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/64xxx/CVE-2026-64678.json
+91
View File
@@ -0,0 +1,91 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64678",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-20T17:12:12.892Z",
"datePublished": "2026-11-11T04:07:12.719Z",
"dateUpdated": "2026-11-11T04:07:12.719Z"
},
"containers": {
"cna": {
"title": "Nitrite: Unfiltered Java Deserialization in Legacy v1 Database Migration Path",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"lang": "en",
"description": "CWE-502: Deserialization of Untrusted Data",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/nitrite/nitrite-java/security/advisories/GHSA-9297-g93h-86gg",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/nitrite/nitrite-java/security/advisories/GHSA-9297-g93h-86gg"
},
{
"name": "https://github.com/nitrite/nitrite-java/releases/tag/v4.4.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/nitrite/nitrite-java/releases/tag/v4.4.1"
}
],
"affected": [
{
"vendor": "nitrite",
"product": "nitrite-java",
"versions": [
{
"version": "< 4.4.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-11T04:07:12.719Z"
},
"descriptions": [
{
"lang": "en",
"value": "NOsql Object (NO2 a.k.a Nitrite) database is an open source nosql embedded document store. Prior to version 4.4.1, when Nitrite opens a database file, MVStoreUtils.openOrCreate() automatically checks for a legacy v1-format store and, on detecting one (or hitting a compatibility error while opening), triggers an automatic migration path. This path deserializes stored values using NitriteDataType.deserialize(byte[]), which passes the raw bytes directly to java.io.ObjectInputStream.readObject() via a custom NitriteObjectInputStream subclass. That subclass overrides only readClassDescriptor() — solely to remap a handful of known legacy class names to their current equivalents — and implements no class allowlist, blocklist, or ObjectInputFilter (JEP 290). Any Serializable class reachable on the embedding application's classpath can therefore be instantiated via readObject(), with readObject()/readExternal()/readResolve() callbacks invoked unconditionally. If a suitable gadget class (e.g. from commons-collections or similar) happens to be present on the classpath, this is a precondition for remote code execution. This issue has been patched in version 4.4.1."
}
],
"source": {
"advisory": "GHSA-9297-g93h-86gg",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/64xxx/CVE-2026-64682.json
+115
View File
@@ -0,0 +1,115 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64682",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-20T17:12:12.892Z",
"datePublished": "2026-11-11T04:04:09.388Z",
"dateUpdated": "2026-11-11T04:04:09.388Z"
},
"containers": {
"cna": {
"title": "AstroBlocks: Admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-321",
"lang": "en",
"description": "CWE-321: Use of Hard-coded Cryptographic Key",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-798",
"lang": "en",
"description": "CWE-798: Use of Hard-coded Credentials",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/NauelG/astro-blocks/security/advisories/GHSA-mfcg-m7j5-7v72",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/NauelG/astro-blocks/security/advisories/GHSA-mfcg-m7j5-7v72"
},
{
"name": "https://github.com/NauelG/astro-blocks/pull/51",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/NauelG/astro-blocks/pull/51"
},
{
"name": "https://github.com/NauelG/astro-blocks/commit/fd83bf0b37a756363f718e134c16e448da09a74d",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/NauelG/astro-blocks/commit/fd83bf0b37a756363f718e134c16e448da09a74d"
},
{
"name": "https://github.com/NauelG/astro-blocks/releases/tag/v3.4.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/NauelG/astro-blocks/releases/tag/v3.4.0"
}
],
"affected": [
{
"vendor": "NauelG",
"product": "astro-blocks",
"versions": [
{
"version": "< 3.4.0",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-11T04:04:09.388Z"
},
"descriptions": [
{
"lang": "en",
"value": "AstroBlocks is a block-first CMS for Astro projects. Prior to version 3.4.0, admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name. An attacker who knows the public fallback value (readable in the published package) can forge a valid session token with role: \"owner\" and obtain full administrative control of the CMS — creating/deleting content, users, media, redirects, and configuration. This issue has been patched in version 3.4.0."
}
],
"source": {
"advisory": "GHSA-mfcg-m7j5-7v72",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/64xxx/CVE-2026-64686.json
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64686",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-20T17:12:12.892Z",
"datePublished": "2026-11-11T04:10:36.576Z",
"dateUpdated": "2026-11-11T04:10:36.576Z"
},
"containers": {
"cna": {
"title": "OpenSearch Dashboards: SSRF in fetchDataSourceMetaData — missing endpoint validation",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"lang": "en",
"description": "CWE-918: Server-Side Request Forgery",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/opensearch-project/OpenSearch-Dashboards/security/advisories/GHSA-6qp6-3675-ffr3",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/opensearch-project/OpenSearch-Dashboards/security/advisories/GHSA-6qp6-3675-ffr3"
},
{
"name": "https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/2.19.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/2.19.6"
},
{
"name": "https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/3.7.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/3.7.0"
}
],
"affected": [
{
"vendor": "opensearch-project",
"product": "OpenSearch-Dashboards",
"versions": [
{
"version": ">= 2.14.0, < 2.19.6",
"status": "affected"
},
{
"version": ">= 3.0.0, < 3.7.0",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-11T04:10:36.576Z"
},
"descriptions": [
{
"lang": "en",
"value": "OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From versions 2.14.0 to before 2.19.6, and 3.0.0 to before 3.7.0, a Server-Side Request Forgery (SSRF) vulnerability in OpenSearch Dashboards exists in the fetchDataSourceMetaData route. The sibling test_connection route validates incoming endpoint URLs via isValidURL() against configured endpointDeniedIPs and endpointAllowlistedSuffixes lists, but fetchDataSourceMetaData accepts the same input shape without performing this validation. An authenticated user can supply an internal or loopback endpoint to probe internal network resources. This issue has been patched in versions 2.19.6 and 3.7.0."
}
],
"source": {
"advisory": "GHSA-6qp6-3675-ffr3",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/68xxx/CVE-2026-68935.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-31T21:49:24.927Z",
"datePublished": "2026-11-06T21:15:35.795Z",
"dateUpdated": "2026-11-06T21:15:35.795Z"
"dateUpdated": "2026-11-11T03:37:34.598Z"
},
"containers": {
"cna": {
@@ -93,6 +93,48 @@
"advisory": "GHSA-4q3v-5r7x-58q2",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-4q3v-5r7x-58q2",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:37:11.583928Z",
"id": "CVE-2026-68935",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:37:34.598Z"
}
}
]
}
}
data/2026/85xxx/CVE-2026-85726.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-09-04T14:45:10.648Z",
"datePublished": "2026-11-06T21:08:18.807Z",
"dateUpdated": "2026-11-06T21:08:18.807Z"
"dateUpdated": "2026-11-11T03:34:11.202Z"
},
"containers": {
"cna": {
@@ -93,6 +93,48 @@
"advisory": "GHSA-mr45-2r9x-cgwf",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-mr45-2r9x-cgwf",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-11T03:33:33.370820Z",
"id": "CVE-2026-85726",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-11T03:34:11.202Z"
}
}
]
}
}
data/2026/92xxx/CVE-2026-92092.json
+29 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "redhat",
"dateReserved": "2026-09-15T14:34:28.814Z",
"datePublished": "2026-10-29T19:51:44.996Z",
"dateUpdated": "2026-11-09T22:38:26.641Z"
"dateUpdated": "2026-11-11T03:26:54.451Z"
},
"containers": {
"cna": {
@@ -86,6 +86,25 @@
"cpe:/a:redhat:openshift:4.16::el9"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.17",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-ansible",
"defaultStatus": "affected",
"versions": [
{
"version": "0:4.17.0-202611050920.p2.gf11de04.assembly.stream.el8",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.17::el8",
"cpe:/a:redhat:openshift:4.17::el9"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
@@ -141,6 +160,14 @@
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:96281",
"name": "RHSA-2026:96281",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/security/cve/CVE-2026-92092",
"tags": [
@@ -192,7 +219,7 @@
"providerMetadata": {
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat",
"dateUpdated": "2026-11-09T22:38:26.641Z"
"dateUpdated": "2026-11-11T03:26:54.451Z"
},
"x_generator": {
"engine": "cvelib 1.8.0"
data/delta.json
+30 -156
View File
@@ -1,176 +1,50 @@
{
"fetchTime": "2026-11-11T03:17:12.413Z",
"numberOfChanges": 28,
"fetchTime": "2026-11-11T04:17:18.554Z",
"numberOfChanges": 7,
"new": [
{
"cveId": "CVE-2026-97033",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97033",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97033.json",
"dateUpdated": "2026-11-11T03:13:17.601Z"
"cveId": "CVE-2026-61810",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61810",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61810.json",
"dateUpdated": "2026-11-11T04:16:28.714Z"
},
{
"cveId": "CVE-2026-97034",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97034",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97034.json",
"dateUpdated": "2026-11-11T03:13:17.194Z"
"cveId": "CVE-2026-64678",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64678",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64678.json",
"dateUpdated": "2026-11-11T04:07:12.719Z"
},
{
"cveId": "CVE-2026-97035",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97035",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97035.json",
"dateUpdated": "2026-11-11T03:13:16.798Z"
},
{
"cveId": "CVE-2026-97036",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97036",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97036.json",
"dateUpdated": "2026-11-11T03:13:16.347Z"
},
{
"cveId": "CVE-2026-97037",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97037",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97037.json",
"dateUpdated": "2026-11-11T03:13:16.142Z"
},
{
"cveId": "CVE-2026-97038",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97038",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97038.json",
"dateUpdated": "2026-11-11T03:13:15.930Z"
},
{
"cveId": "CVE-2026-97039",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97039",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97039.json",
"dateUpdated": "2026-11-11T03:13:15.684Z"
},
{
"cveId": "CVE-2026-97040",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97040",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97040.json",
"dateUpdated": "2026-11-11T03:13:15.477Z"
},
{
"cveId": "CVE-2026-97041",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97041",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97041.json",
"dateUpdated": "2026-11-11T03:13:15.269Z"
},
{
"cveId": "CVE-2026-97042",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97042",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97042.json",
"dateUpdated": "2026-11-11T03:13:15.060Z"
},
{
"cveId": "CVE-2026-97043",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97043",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97043.json",
"dateUpdated": "2026-11-11T03:13:14.827Z"
},
{
"cveId": "CVE-2026-97054",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97054",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97054.json",
"dateUpdated": "2026-11-11T03:13:17.877Z"
"cveId": "CVE-2026-64686",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64686",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64686.json",
"dateUpdated": "2026-11-11T04:10:36.576Z"
}
],
"updated": [
{
"cveId": "CVE-2026-102359",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102359",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102359.json",
"dateUpdated": "2026-11-11T03:13:53.054Z"
"cveId": "CVE-2026-123495",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123495",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123495.json",
"dateUpdated": "2026-11-11T04:05:04.826Z"
},
{
"cveId": "CVE-2026-108262",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108262",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108262.json",
"dateUpdated": "2026-11-11T03:16:39.472Z"
"cveId": "CVE-2026-123499",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123499",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123499.json",
"dateUpdated": "2026-11-11T04:05:52.242Z"
},
{
"cveId": "CVE-2026-118515",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118515",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118515.json",
"dateUpdated": "2026-11-11T03:10:02.952Z"
"cveId": "CVE-2026-123503",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123503",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123503.json",
"dateUpdated": "2026-11-11T04:06:33.979Z"
},
{
"cveId": "CVE-2026-123622",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123622",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123622.json",
"dateUpdated": "2026-11-11T03:05:29.613Z"
},
{
"cveId": "CVE-2026-123623",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123623",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123623.json",
"dateUpdated": "2026-11-11T03:07:33.112Z"
},
{
"cveId": "CVE-2026-123676",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123676",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123676.json",
"dateUpdated": "2026-11-11T03:08:22.186Z"
},
{
"cveId": "CVE-2026-123784",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123784",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123784.json",
"dateUpdated": "2026-11-11T03:06:39.965Z"
},
{
"cveId": "CVE-2026-33818",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33818.json",
"dateUpdated": "2026-11-11T03:13:09.554Z"
},
{
"cveId": "CVE-2026-42504",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42504.json",
"dateUpdated": "2026-11-11T03:13:08.033Z"
},
{
"cveId": "CVE-2026-62344",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62344",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62344.json",
"dateUpdated": "2026-11-11T03:15:45.502Z"
},
{
"cveId": "CVE-2026-62850",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62850",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62850.json",
"dateUpdated": "2026-11-11T03:12:03.535Z"
},
{
"cveId": "CVE-2026-62854",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62854",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62854.json",
"dateUpdated": "2026-11-11T03:10:52.935Z"
},
{
"cveId": "CVE-2026-85743",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85743",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85743.json",
"dateUpdated": "2026-11-11T03:13:02.881Z"
},
{
"cveId": "CVE-2026-89017",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89017",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89017.json",
"dateUpdated": "2026-11-11T03:14:46.350Z"
},
{
"cveId": "CVE-2026-96275",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96275",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96275.json",
"dateUpdated": "2026-11-11T03:10:26.245Z"
},
{
"cveId": "CVE-2026-96280",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96280",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96280.json",
"dateUpdated": "2026-11-11T03:10:34.489Z"
"cveId": "CVE-2026-124057",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124057",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124057.json",
"dateUpdated": "2026-11-11T04:04:19.822Z"
}
],
"error": []
data/deltaLog.json
+453 -53
View File
@@ -1,4 +1,457 @@
[
{
"fetchTime": "2026-11-11T04:17:18.554Z",
"numberOfChanges": 7,
"new": [
{
"cveId": "CVE-2026-61810",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61810",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61810.json",
"dateUpdated": "2026-11-11T04:16:28.714Z"
},
{
"cveId": "CVE-2026-64678",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64678",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64678.json",
"dateUpdated": "2026-11-11T04:07:12.719Z"
},
{
"cveId": "CVE-2026-64686",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64686",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64686.json",
"dateUpdated": "2026-11-11T04:10:36.576Z"
}
],
"updated": [
{
"cveId": "CVE-2026-123495",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123495",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123495.json",
"dateUpdated": "2026-11-11T04:05:04.826Z"
},
{
"cveId": "CVE-2026-123499",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123499",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123499.json",
"dateUpdated": "2026-11-11T04:05:52.242Z"
},
{
"cveId": "CVE-2026-123503",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123503",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123503.json",
"dateUpdated": "2026-11-11T04:06:33.979Z"
},
{
"cveId": "CVE-2026-124057",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124057",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124057.json",
"dateUpdated": "2026-11-11T04:04:19.822Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-11T04:04:16.657Z",
"numberOfChanges": 7,
"new": [
{
"cveId": "CVE-2026-64682",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64682",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64682.json",
"dateUpdated": "2026-11-11T04:04:09.388Z"
}
],
"updated": [
{
"cveId": "CVE-2026-120857",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120857",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120857.json",
"dateUpdated": "2026-11-11T03:57:57.652Z"
},
{
"cveId": "CVE-2026-123963",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123963",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123963.json",
"dateUpdated": "2026-11-11T03:58:38.261Z"
},
{
"cveId": "CVE-2026-123989",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123989",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123989.json",
"dateUpdated": "2026-11-11T04:03:17.507Z"
},
{
"cveId": "CVE-2026-124309",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124309",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124309.json",
"dateUpdated": "2026-11-11T03:59:43.169Z"
},
{
"cveId": "CVE-2026-124313",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124313",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124313.json",
"dateUpdated": "2026-11-11T04:01:32.154Z"
},
{
"cveId": "CVE-2026-124317",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124317",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124317.json",
"dateUpdated": "2026-11-11T04:02:24.741Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-11T03:57:02.759Z",
"numberOfChanges": 12,
"new": [
{
"cveId": "CVE-2026-64666",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64666",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64666.json",
"dateUpdated": "2026-11-11T03:51:12.232Z"
},
{
"cveId": "CVE-2026-64667",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64667",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64667.json",
"dateUpdated": "2026-11-11T03:51:59.164Z"
},
{
"cveId": "CVE-2026-64669",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64669",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64669.json",
"dateUpdated": "2026-11-11T03:52:43.930Z"
}
],
"updated": [
{
"cveId": "CVE-2026-119494",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119494",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119494.json",
"dateUpdated": "2026-11-11T03:56:16.622Z"
},
{
"cveId": "CVE-2026-123958",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123958",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123958.json",
"dateUpdated": "2026-11-11T03:55:42.848Z"
},
{
"cveId": "CVE-2026-17358",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17358",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17358.json",
"dateUpdated": "2026-11-11T03:51:54.428Z"
},
{
"cveId": "CVE-2026-17365",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17365",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17365.json",
"dateUpdated": "2026-11-11T03:52:25.218Z"
},
{
"cveId": "CVE-2026-17370",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17370",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17370.json",
"dateUpdated": "2026-11-11T03:52:56.272Z"
},
{
"cveId": "CVE-2026-17380",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17380",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17380.json",
"dateUpdated": "2026-11-11T03:53:26.397Z"
},
{
"cveId": "CVE-2026-17384",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17384",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17384.json",
"dateUpdated": "2026-11-11T03:54:44.432Z"
},
{
"cveId": "CVE-2026-17398",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17398",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17398.json",
"dateUpdated": "2026-11-11T03:54:11.917Z"
},
{
"cveId": "CVE-2026-26248",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-26248",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/26xxx/CVE-2026-26248.json",
"dateUpdated": "2026-11-11T03:55:44.333Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-11T03:50:54.546Z",
"numberOfChanges": 11,
"new": [
{
"cveId": "CVE-2026-64668",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64668",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64668.json",
"dateUpdated": "2026-11-11T03:50:14.037Z"
}
],
"updated": [
{
"cveId": "CVE-2026-17280",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17280",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17280.json",
"dateUpdated": "2026-11-11T03:45:09.625Z"
},
{
"cveId": "CVE-2026-17291",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17291",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17291.json",
"dateUpdated": "2026-11-11T03:45:38.756Z"
},
{
"cveId": "CVE-2026-17296",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17296",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17296.json",
"dateUpdated": "2026-11-11T03:46:07.229Z"
},
{
"cveId": "CVE-2026-17312",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17312",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17312.json",
"dateUpdated": "2026-11-11T03:46:35.158Z"
},
{
"cveId": "CVE-2026-17317",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17317",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17317.json",
"dateUpdated": "2026-11-11T03:47:10.261Z"
},
{
"cveId": "CVE-2026-17322",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17322",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17322.json",
"dateUpdated": "2026-11-11T03:47:45.513Z"
},
{
"cveId": "CVE-2026-17327",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17327",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17327.json",
"dateUpdated": "2026-11-11T03:48:34.546Z"
},
{
"cveId": "CVE-2026-17332",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17332",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17332.json",
"dateUpdated": "2026-11-11T03:49:01.799Z"
},
{
"cveId": "CVE-2026-17337",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17337",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17337.json",
"dateUpdated": "2026-11-11T03:49:56.806Z"
},
{
"cveId": "CVE-2026-17353",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17353",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17353.json",
"dateUpdated": "2026-11-11T03:50:26.994Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-11T03:44:58.064Z",
"numberOfChanges": 11,
"new": [
{
"cveId": "CVE-2026-64670",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64670",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64670.json",
"dateUpdated": "2026-11-11T03:42:22.276Z"
},
{
"cveId": "CVE-2026-64671",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64671",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64671.json",
"dateUpdated": "2026-11-11T03:42:13.103Z"
}
],
"updated": [
{
"cveId": "CVE-2026-103022",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103022",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103022.json",
"dateUpdated": "2026-11-11T03:39:17.860Z"
},
{
"cveId": "CVE-2026-108178",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108178",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108178.json",
"dateUpdated": "2026-11-11T03:39:48.143Z"
},
{
"cveId": "CVE-2026-16884",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16884",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16884.json",
"dateUpdated": "2026-11-11T03:40:26.186Z"
},
{
"cveId": "CVE-2026-17062",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17062",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17062.json",
"dateUpdated": "2026-11-11T03:41:01.200Z"
},
{
"cveId": "CVE-2026-17146",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17146",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17146.json",
"dateUpdated": "2026-11-11T03:41:32.000Z"
},
{
"cveId": "CVE-2026-17190",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17190",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17190.json",
"dateUpdated": "2026-11-11T03:42:11.342Z"
},
{
"cveId": "CVE-2026-17225",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17225",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17225.json",
"dateUpdated": "2026-11-11T03:42:56.593Z"
},
{
"cveId": "CVE-2026-17233",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17233",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17233.json",
"dateUpdated": "2026-11-11T03:44:12.772Z"
},
{
"cveId": "CVE-2026-17240",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17240",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17240.json",
"dateUpdated": "2026-11-11T03:44:40.095Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-11T03:38:58.899Z",
"numberOfChanges": 5,
"new": [],
"updated": [
{
"cveId": "CVE-2026-104267",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104267",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104267.json",
"dateUpdated": "2026-11-11T03:38:32.723Z"
},
{
"cveId": "CVE-2026-123788",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123788",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123788.json",
"dateUpdated": "2026-11-11T03:36:37.238Z"
},
{
"cveId": "CVE-2026-54589",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-54589",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54589.json",
"dateUpdated": "2026-11-11T03:32:46.255Z"
},
{
"cveId": "CVE-2026-68935",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-68935",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68935.json",
"dateUpdated": "2026-11-11T03:37:34.598Z"
},
{
"cveId": "CVE-2026-85726",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85726",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85726.json",
"dateUpdated": "2026-11-11T03:34:11.202Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-11T03:31:55.047Z",
"numberOfChanges": 6,
"new": [],
"updated": [
{
"cveId": "CVE-2025-55002",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-55002",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55002.json",
"dateUpdated": "2026-11-11T03:29:50.069Z"
},
{
"cveId": "CVE-2026-102657",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102657",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102657.json",
"dateUpdated": "2026-11-11T03:30:44.632Z"
},
{
"cveId": "CVE-2026-59171",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59171",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59171.json",
"dateUpdated": "2026-11-11T03:27:27.596Z"
},
{
"cveId": "CVE-2026-63440",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63440",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63440.json",
"dateUpdated": "2026-11-11T03:28:42.896Z"
},
{
"cveId": "CVE-2026-63663",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63663",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63663.json",
"dateUpdated": "2026-11-11T03:26:33.424Z"
},
{
"cveId": "CVE-2026-92092",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92092",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92092.json",
"dateUpdated": "2026-11-11T03:26:54.451Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-11T03:25:51.388Z",
"numberOfChanges": 5,
"new": [],
"updated": [
{
"cveId": "CVE-2026-123995",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123995",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123995.json",
"dateUpdated": "2026-11-11T03:19:46.980Z"
},
{
"cveId": "CVE-2026-124025",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124025",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124025.json",
"dateUpdated": "2026-11-11T03:22:20.366Z"
},
{
"cveId": "CVE-2026-124029",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124029",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124029.json",
"dateUpdated": "2026-11-11T03:24:01.593Z"
},
{
"cveId": "CVE-2026-124040",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124040",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124040.json",
"dateUpdated": "2026-11-11T03:24:56.121Z"
},
{
"cveId": "CVE-2026-46429",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-46429",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/46xxx/CVE-2026-46429.json",
"dateUpdated": "2026-11-11T03:25:47.093Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-11T03:17:12.413Z",
"numberOfChanges": 28,
@@ -831582,58 +832035,5 @@
}
],
"error": []
},
{
"fetchTime": "2026-10-12T04:05:20.424Z",
"numberOfChanges": 2,
"new": [
{
"cveId": "CVE-2026-108797",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108797",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108797.json",
"dateUpdated": "2026-10-12T03:45:09.489Z"
},
{
"cveId": "CVE-2026-108798",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108798",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108798.json",
"dateUpdated": "2026-10-12T04:00:12.485Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-10-12T03:41:41.501Z",
"numberOfChanges": 4,
"new": [
{
"cveId": "CVE-2026-108795",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108795",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108795.json",
"dateUpdated": "2026-10-12T03:15:11.391Z"
},
{
"cveId": "CVE-2026-108796",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108796",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108796.json",
"dateUpdated": "2026-10-12T03:30:15.059Z"
}
],
"updated": [
{
"cveId": "CVE-2026-96275",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96275",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96275.json",
"dateUpdated": "2026-10-12T03:12:49.636Z"
},
{
"cveId": "CVE-2026-96280",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96280",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96280.json",
"dateUpdated": "2026-10-12T03:12:49.622Z"
}
],
"error": []
}
]
state/sync.json
+3 -3
View File
@@ -1,7 +1,7 @@
{
"source": "https://github.com/CVEProject/cvelistV5.git",
"upstream_commit": "ab59152b3a36e1cd4d740b8ecab41708e3724edc",
"upstream_commit": "50b688d6a29fb7ccfdff07f49fbf6452a0f10840",
"since_year": 2017,
"records": 330766,
"synced_at_utc": "2026-11-11T03:30:01.397772+00:00"
"records": 330776,
"synced_at_utc": "2026-11-11T04:29:57.065770+00:00"
}