From 80d2b24cc87c5244ddf15f70dcbc98b3ae8f2161 Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Wed, 11 Nov 2026 05:38:28 +0100 Subject: [PATCH] CVE sync 2026-11-11T04:38:23Z --- data/2025/55xxx/CVE-2025-55002.json | 38 +- data/2026/102xxx/CVE-2026-102657.json | 46 ++- data/2026/103xxx/CVE-2026-103022.json | 38 +- data/2026/104xxx/CVE-2026-104267.json | 38 +- data/2026/108xxx/CVE-2026-108178.json | 38 +- data/2026/119xxx/CVE-2026-119494.json | 38 +- data/2026/120xxx/CVE-2026-120857.json | 38 +- data/2026/123xxx/CVE-2026-123495.json | 38 +- data/2026/123xxx/CVE-2026-123499.json | 38 +- data/2026/123xxx/CVE-2026-123503.json | 38 +- data/2026/123xxx/CVE-2026-123788.json | 46 ++- data/2026/123xxx/CVE-2026-123958.json | 38 +- data/2026/123xxx/CVE-2026-123963.json | 38 +- data/2026/123xxx/CVE-2026-123989.json | 38 +- data/2026/123xxx/CVE-2026-123995.json | 38 +- data/2026/124xxx/CVE-2026-124025.json | 38 +- data/2026/124xxx/CVE-2026-124029.json | 46 ++- data/2026/124xxx/CVE-2026-124040.json | 38 +- data/2026/124xxx/CVE-2026-124057.json | 38 +- data/2026/124xxx/CVE-2026-124309.json | 38 +- data/2026/124xxx/CVE-2026-124313.json | 38 +- data/2026/124xxx/CVE-2026-124317.json | 38 +- data/2026/16xxx/CVE-2026-16884.json | 38 +- data/2026/17xxx/CVE-2026-17062.json | 38 +- data/2026/17xxx/CVE-2026-17146.json | 38 +- data/2026/17xxx/CVE-2026-17190.json | 38 +- data/2026/17xxx/CVE-2026-17225.json | 38 +- data/2026/17xxx/CVE-2026-17233.json | 38 +- data/2026/17xxx/CVE-2026-17240.json | 38 +- data/2026/17xxx/CVE-2026-17280.json | 38 +- data/2026/17xxx/CVE-2026-17291.json | 38 +- data/2026/17xxx/CVE-2026-17296.json | 38 +- data/2026/17xxx/CVE-2026-17312.json | 38 +- data/2026/17xxx/CVE-2026-17317.json | 38 +- data/2026/17xxx/CVE-2026-17322.json | 38 +- data/2026/17xxx/CVE-2026-17327.json | 38 +- data/2026/17xxx/CVE-2026-17332.json | 38 +- data/2026/17xxx/CVE-2026-17337.json | 38 +- data/2026/17xxx/CVE-2026-17353.json | 38 +- data/2026/17xxx/CVE-2026-17358.json | 38 +- data/2026/17xxx/CVE-2026-17365.json | 38 +- data/2026/17xxx/CVE-2026-17370.json | 38 +- data/2026/17xxx/CVE-2026-17380.json | 38 +- data/2026/17xxx/CVE-2026-17384.json | 38 +- data/2026/17xxx/CVE-2026-17398.json | 38 +- data/2026/26xxx/CVE-2026-26248.json | 6 +- data/2026/46xxx/CVE-2026-46429.json | 38 +- data/2026/54xxx/CVE-2026-54589.json | 46 ++- data/2026/59xxx/CVE-2026-59171.json | 46 ++- data/2026/61xxx/CVE-2026-61810.json | 94 +++++ data/2026/63xxx/CVE-2026-63440.json | 46 ++- data/2026/63xxx/CVE-2026-63663.json | 38 +- data/2026/64xxx/CVE-2026-64666.json | 112 ++++++ data/2026/64xxx/CVE-2026-64667.json | 112 ++++++ data/2026/64xxx/CVE-2026-64668.json | 115 ++++++ data/2026/64xxx/CVE-2026-64669.json | 115 ++++++ data/2026/64xxx/CVE-2026-64670.json | 94 +++++ data/2026/64xxx/CVE-2026-64671.json | 94 +++++ data/2026/64xxx/CVE-2026-64678.json | 91 +++++ data/2026/64xxx/CVE-2026-64682.json | 115 ++++++ data/2026/64xxx/CVE-2026-64686.json | 102 ++++++ data/2026/68xxx/CVE-2026-68935.json | 46 ++- data/2026/85xxx/CVE-2026-85726.json | 46 ++- data/2026/92xxx/CVE-2026-92092.json | 31 +- data/delta.json | 186 ++-------- data/deltaLog.json | 506 +++++++++++++++++++++++--- state/sync.json | 6 +- 67 files changed, 3498 insertions(+), 321 deletions(-) create mode 100644 data/2026/61xxx/CVE-2026-61810.json create mode 100644 data/2026/64xxx/CVE-2026-64666.json create mode 100644 data/2026/64xxx/CVE-2026-64667.json create mode 100644 data/2026/64xxx/CVE-2026-64668.json create mode 100644 data/2026/64xxx/CVE-2026-64669.json create mode 100644 data/2026/64xxx/CVE-2026-64670.json create mode 100644 data/2026/64xxx/CVE-2026-64671.json create mode 100644 data/2026/64xxx/CVE-2026-64678.json create mode 100644 data/2026/64xxx/CVE-2026-64682.json create mode 100644 data/2026/64xxx/CVE-2026-64686.json diff --git a/data/2025/55xxx/CVE-2025-55002.json b/data/2025/55xxx/CVE-2025-55002.json index 2dc8ad78c3..90f128812f 100644 --- a/data/2025/55xxx/CVE-2025-55002.json +++ b/data/2025/55xxx/CVE-2025-55002.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2025-08-04T17:34:24.421Z", "datePublished": "2026-11-06T20:32:37.521Z", - "dateUpdated": "2026-11-06T20:32:37.521Z" + "dateUpdated": "2026-11-11T03:29:50.069Z" }, "containers": { "cna": { @@ -113,6 +113,40 @@ "advisory": "GHSA-5c3f-5gj7-p9xh", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:29:38.969959Z", + "id": "CVE-2025-55002", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:29:50.069Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/102xxx/CVE-2026-102657.json b/data/2026/102xxx/CVE-2026-102657.json index 3cbecafa12..c67ccb9758 100644 --- a/data/2026/102xxx/CVE-2026-102657.json +++ b/data/2026/102xxx/CVE-2026-102657.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-09-29T15:56:02.101Z", "datePublished": "2026-11-06T20:49:28.708Z", - "dateUpdated": "2026-11-06T20:49:28.708Z" + "dateUpdated": "2026-11-11T03:30:44.632Z" }, "containers": { "cna": { @@ -107,6 +107,48 @@ "advisory": "GHSA-g3c2-rjq2-c763", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/esm-dev/esm.sh/security/advisories/GHSA-g3c2-rjq2-c763", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:30:20.973915Z", + "id": "CVE-2026-102657", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:30:44.632Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/103xxx/CVE-2026-103022.json b/data/2026/103xxx/CVE-2026-103022.json index 46506670f3..1f23b6643a 100644 --- a/data/2026/103xxx/CVE-2026-103022.json +++ b/data/2026/103xxx/CVE-2026-103022.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-09-29T21:13:24.031Z", "datePublished": "2026-11-06T21:33:37.028Z", - "dateUpdated": "2026-11-06T21:33:37.028Z" + "dateUpdated": "2026-11-11T03:39:17.860Z" }, "containers": { "cna": { @@ -120,6 +120,40 @@ "advisory": "GHSA-cp25-j9x5-p5xm", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:39:06.834605Z", + "id": "CVE-2026-103022", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:39:17.860Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/104xxx/CVE-2026-104267.json b/data/2026/104xxx/CVE-2026-104267.json index 246bbedd91..b418c66f38 100644 --- a/data/2026/104xxx/CVE-2026-104267.json +++ b/data/2026/104xxx/CVE-2026-104267.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-10-01T19:04:39.707Z", "datePublished": "2026-11-06T21:25:42.417Z", - "dateUpdated": "2026-11-06T21:25:42.417Z" + "dateUpdated": "2026-11-11T03:38:32.723Z" }, "containers": { "cna": { @@ -96,6 +96,40 @@ "advisory": "GHSA-36rp-hhp4-wh83", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:38:20.231461Z", + "id": "CVE-2026-104267", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:38:32.723Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108178.json b/data/2026/108xxx/CVE-2026-108178.json index db677c5fc5..db9fdb2fcc 100644 --- a/data/2026/108xxx/CVE-2026-108178.json +++ b/data/2026/108xxx/CVE-2026-108178.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-10-09T16:47:17.019Z", "datePublished": "2026-11-07T04:31:16.464Z", - "dateUpdated": "2026-11-07T04:31:16.464Z" + "dateUpdated": "2026-11-11T03:39:48.143Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:39:36.571727Z", + "id": "CVE-2026-108178", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:39:48.143Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119494.json b/data/2026/119xxx/CVE-2026-119494.json index 2319813a94..908b175f09 100644 --- a/data/2026/119xxx/CVE-2026-119494.json +++ b/data/2026/119xxx/CVE-2026-119494.json @@ -8,7 +8,7 @@ "assignerShortName": "Patchstack", "dateReserved": "2026-10-30T09:20:18.655Z", "datePublished": "2026-11-07T10:08:28.998Z", - "dateUpdated": "2026-11-07T10:09:29.820Z" + "dateUpdated": "2026-11-11T03:56:16.622Z" }, "containers": { "cna": { @@ -134,6 +134,40 @@ "tags": [ "x_open-source" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:56:05.336656Z", + "id": "CVE-2026-119494", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:56:16.622Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120857.json b/data/2026/120xxx/CVE-2026-120857.json index 3d86a4da8a..b972897de9 100644 --- a/data/2026/120xxx/CVE-2026-120857.json +++ b/data/2026/120xxx/CVE-2026-120857.json @@ -8,7 +8,7 @@ "assignerShortName": "Patchstack", "dateReserved": "2026-11-03T00:24:21.838Z", "datePublished": "2026-11-07T10:39:37.731Z", - "dateUpdated": "2026-11-07T10:40:37.937Z" + "dateUpdated": "2026-11-11T03:57:57.652Z" }, "containers": { "cna": { @@ -134,6 +134,40 @@ "tags": [ "x_open-source" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:57:47.540784Z", + "id": "CVE-2026-120857", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:57:57.652Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123495.json b/data/2026/123xxx/CVE-2026-123495.json index 314a4ffe91..dcd8f32574 100644 --- a/data/2026/123xxx/CVE-2026-123495.json +++ b/data/2026/123xxx/CVE-2026-123495.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:45:39.025Z", "datePublished": "2026-11-08T01:37:13.573Z", - "dateUpdated": "2026-11-08T01:37:13.573Z" + "dateUpdated": "2026-11-11T04:05:04.826Z" }, "containers": { "cna": { @@ -134,6 +134,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T04:04:53.634116Z", + "id": "CVE-2026-123495", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T04:05:04.826Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123499.json b/data/2026/123xxx/CVE-2026-123499.json index ec9678f0cc..ea46046cd4 100644 --- a/data/2026/123xxx/CVE-2026-123499.json +++ b/data/2026/123xxx/CVE-2026-123499.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:45:39.026Z", "datePublished": "2026-11-08T01:37:16.315Z", - "dateUpdated": "2026-11-08T01:37:16.315Z" + "dateUpdated": "2026-11-11T04:05:52.242Z" }, "containers": { "cna": { @@ -133,6 +133,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T04:05:41.244401Z", + "id": "CVE-2026-123499", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T04:05:52.242Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123503.json b/data/2026/123xxx/CVE-2026-123503.json index 1852207e05..dfca26b801 100644 --- a/data/2026/123xxx/CVE-2026-123503.json +++ b/data/2026/123xxx/CVE-2026-123503.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:45:39.026Z", "datePublished": "2026-11-08T01:37:19.068Z", - "dateUpdated": "2026-11-08T01:37:19.068Z" + "dateUpdated": "2026-11-11T04:06:33.979Z" }, "containers": { "cna": { @@ -140,6 +140,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T04:06:24.336617Z", + "id": "CVE-2026-123503", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T04:06:33.979Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123788.json b/data/2026/123xxx/CVE-2026-123788.json index 873bbe76a1..62650b5a38 100644 --- a/data/2026/123xxx/CVE-2026-123788.json +++ b/data/2026/123xxx/CVE-2026-123788.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-06T14:44:36.840Z", "datePublished": "2026-11-06T21:15:17.807Z", - "dateUpdated": "2026-11-06T21:15:17.807Z" + "dateUpdated": "2026-11-11T03:36:37.238Z" }, "containers": { "cna": { @@ -217,6 +217,48 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/chenyme/grok2api/issues/1072", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:35:54.231283Z", + "id": "CVE-2026-123788", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:36:37.238Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123958.json b/data/2026/123xxx/CVE-2026-123958.json index 485f161664..9e1c42191a 100644 --- a/data/2026/123xxx/CVE-2026-123958.json +++ b/data/2026/123xxx/CVE-2026-123958.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-06T17:07:15.460Z", "datePublished": "2026-11-07T09:00:21.640Z", - "dateUpdated": "2026-11-07T09:00:21.640Z" + "dateUpdated": "2026-11-11T03:55:42.848Z" }, "containers": { "cna": { @@ -165,6 +165,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:55:32.276607Z", + "id": "CVE-2026-123958", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:55:42.848Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123963.json b/data/2026/123xxx/CVE-2026-123963.json index 9d36a72f35..4b5d536a44 100644 --- a/data/2026/123xxx/CVE-2026-123963.json +++ b/data/2026/123xxx/CVE-2026-123963.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-06T17:12:27.519Z", "datePublished": "2026-11-07T12:30:12.500Z", - "dateUpdated": "2026-11-07T12:30:12.500Z" + "dateUpdated": "2026-11-11T03:58:38.261Z" }, "containers": { "cna": { @@ -168,6 +168,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:58:28.605155Z", + "id": "CVE-2026-123963", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:58:38.261Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123989.json b/data/2026/123xxx/CVE-2026-123989.json index bfbbd7a2f1..7720c1f672 100644 --- a/data/2026/123xxx/CVE-2026-123989.json +++ b/data/2026/123xxx/CVE-2026-123989.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-06T18:14:31.830Z", "datePublished": "2026-11-07T15:00:22.841Z", - "dateUpdated": "2026-11-07T15:00:22.841Z" + "dateUpdated": "2026-11-11T04:03:17.507Z" }, "containers": { "cna": { @@ -326,6 +326,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T04:03:07.445652Z", + "id": "CVE-2026-123989", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T04:03:17.507Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123995.json b/data/2026/123xxx/CVE-2026-123995.json index 0e830f6706..60e99a2ac4 100644 --- a/data/2026/123xxx/CVE-2026-123995.json +++ b/data/2026/123xxx/CVE-2026-123995.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.542Z", "datePublished": "2026-11-06T18:57:06.574Z", - "dateUpdated": "2026-11-06T18:57:06.574Z" + "dateUpdated": "2026-11-11T03:19:46.980Z" }, "containers": { "cna": { @@ -142,6 +142,40 @@ "x_generator": { "engine": "vulncheck" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:19:35.902736Z", + "id": "CVE-2026-123995", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:19:46.980Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124025.json b/data/2026/124xxx/CVE-2026-124025.json index d29b021f03..f2bb5bf00e 100644 --- a/data/2026/124xxx/CVE-2026-124025.json +++ b/data/2026/124xxx/CVE-2026-124025.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:51:26.462Z", "datePublished": "2026-11-06T19:14:43.649Z", - "dateUpdated": "2026-11-06T19:14:43.649Z" + "dateUpdated": "2026-11-11T03:22:20.366Z" }, "containers": { "cna": { @@ -166,6 +166,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:22:10.637675Z", + "id": "CVE-2026-124025", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:22:20.366Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124029.json b/data/2026/124xxx/CVE-2026-124029.json index f273a1501b..1b6c9b4e48 100644 --- a/data/2026/124xxx/CVE-2026-124029.json +++ b/data/2026/124xxx/CVE-2026-124029.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:51:27.887Z", "datePublished": "2026-11-06T19:14:46.245Z", - "dateUpdated": "2026-11-06T19:14:46.245Z" + "dateUpdated": "2026-11-11T03:24:01.593Z" }, "containers": { "cna": { @@ -130,6 +130,48 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/kopia/kopia/issues/5700", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:23:39.213746Z", + "id": "CVE-2026-124029", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:24:01.593Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124040.json b/data/2026/124xxx/CVE-2026-124040.json index 68905dd930..18afedfb83 100644 --- a/data/2026/124xxx/CVE-2026-124040.json +++ b/data/2026/124xxx/CVE-2026-124040.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T19:11:14.928Z", "datePublished": "2026-11-06T19:14:48.975Z", - "dateUpdated": "2026-11-06T19:14:48.975Z" + "dateUpdated": "2026-11-11T03:24:56.121Z" }, "containers": { "cna": { @@ -151,6 +151,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:24:46.139383Z", + "id": "CVE-2026-124040", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:24:56.121Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124057.json b/data/2026/124xxx/CVE-2026-124057.json index 55ce8db52a..b99f0de07f 100644 --- a/data/2026/124xxx/CVE-2026-124057.json +++ b/data/2026/124xxx/CVE-2026-124057.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-06T19:53:48.220Z", "datePublished": "2026-11-07T17:45:21.624Z", - "dateUpdated": "2026-11-07T17:45:21.624Z" + "dateUpdated": "2026-11-11T04:04:19.822Z" }, "containers": { "cna": { @@ -165,6 +165,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T04:04:08.465002Z", + "id": "CVE-2026-124057", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T04:04:19.822Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124309.json b/data/2026/124xxx/CVE-2026-124309.json index 541349f65d..65da05e875 100644 --- a/data/2026/124xxx/CVE-2026-124309.json +++ b/data/2026/124xxx/CVE-2026-124309.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-07T12:24:19.492Z", "datePublished": "2026-11-07T14:17:51.711Z", - "dateUpdated": "2026-11-07T14:17:51.711Z" + "dateUpdated": "2026-11-11T03:59:43.169Z" }, "containers": { "cna": { @@ -147,6 +147,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:59:33.484890Z", + "id": "CVE-2026-124309", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:59:43.169Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124313.json b/data/2026/124xxx/CVE-2026-124313.json index d9eeafbbc8..369619daaa 100644 --- a/data/2026/124xxx/CVE-2026-124313.json +++ b/data/2026/124xxx/CVE-2026-124313.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-07T12:25:24.159Z", "datePublished": "2026-11-07T14:17:54.437Z", - "dateUpdated": "2026-11-07T14:17:54.437Z" + "dateUpdated": "2026-11-11T04:01:32.154Z" }, "containers": { "cna": { @@ -197,6 +197,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T04:01:18.974876Z", + "id": "CVE-2026-124313", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T04:01:32.154Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124317.json b/data/2026/124xxx/CVE-2026-124317.json index 575232cd17..af7c505ac5 100644 --- a/data/2026/124xxx/CVE-2026-124317.json +++ b/data/2026/124xxx/CVE-2026-124317.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-07T12:27:50.865Z", "datePublished": "2026-11-07T14:17:57.180Z", - "dateUpdated": "2026-11-07T14:17:57.180Z" + "dateUpdated": "2026-11-11T04:02:24.741Z" }, "containers": { "cna": { @@ -153,6 +153,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T04:02:14.991976Z", + "id": "CVE-2026-124317", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T04:02:24.741Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/16xxx/CVE-2026-16884.json b/data/2026/16xxx/CVE-2026-16884.json index c050102316..63cf8c5767 100644 --- a/data/2026/16xxx/CVE-2026-16884.json +++ b/data/2026/16xxx/CVE-2026-16884.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-24T04:54:38.847Z", "datePublished": "2026-11-07T04:31:32.122Z", - "dateUpdated": "2026-11-07T04:31:32.122Z" + "dateUpdated": "2026-11-11T03:40:26.186Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:40:15.819637Z", + "id": "CVE-2026-16884", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:40:26.186Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17062.json b/data/2026/17xxx/CVE-2026-17062.json index aaa2541246..e55fa1bc1b 100644 --- a/data/2026/17xxx/CVE-2026-17062.json +++ b/data/2026/17xxx/CVE-2026-17062.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-24T13:49:24.888Z", "datePublished": "2026-11-07T04:31:37.336Z", - "dateUpdated": "2026-11-07T04:31:37.336Z" + "dateUpdated": "2026-11-11T03:41:01.200Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:40:51.538436Z", + "id": "CVE-2026-17062", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:41:01.200Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17146.json b/data/2026/17xxx/CVE-2026-17146.json index 6ec1ecbfc8..1d8c8e2d8a 100644 --- a/data/2026/17xxx/CVE-2026-17146.json +++ b/data/2026/17xxx/CVE-2026-17146.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-24T17:29:47.775Z", "datePublished": "2026-11-07T04:32:00.858Z", - "dateUpdated": "2026-11-07T04:32:00.858Z" + "dateUpdated": "2026-11-11T03:41:32.000Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:41:21.466914Z", + "id": "CVE-2026-17146", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:41:32.000Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17190.json b/data/2026/17xxx/CVE-2026-17190.json index b0a4d2e90d..8e700581a0 100644 --- a/data/2026/17xxx/CVE-2026-17190.json +++ b/data/2026/17xxx/CVE-2026-17190.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-24T19:02:31.986Z", "datePublished": "2026-11-07T04:32:11.130Z", - "dateUpdated": "2026-11-07T04:32:11.130Z" + "dateUpdated": "2026-11-11T03:42:11.342Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:42:00.119807Z", + "id": "CVE-2026-17190", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:42:11.342Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17225.json b/data/2026/17xxx/CVE-2026-17225.json index 2a332eebcb..c0f15d6763 100644 --- a/data/2026/17xxx/CVE-2026-17225.json +++ b/data/2026/17xxx/CVE-2026-17225.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-24T20:24:36.286Z", "datePublished": "2026-11-07T04:32:16.334Z", - "dateUpdated": "2026-11-07T04:32:16.334Z" + "dateUpdated": "2026-11-11T03:42:56.593Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:42:45.999638Z", + "id": "CVE-2026-17225", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:42:56.593Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17233.json b/data/2026/17xxx/CVE-2026-17233.json index 40246d34eb..53e6680689 100644 --- a/data/2026/17xxx/CVE-2026-17233.json +++ b/data/2026/17xxx/CVE-2026-17233.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-24T20:44:29.022Z", "datePublished": "2026-11-07T04:32:21.463Z", - "dateUpdated": "2026-11-07T04:32:21.463Z" + "dateUpdated": "2026-11-11T03:44:12.772Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:44:00.513946Z", + "id": "CVE-2026-17233", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:44:12.772Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17240.json b/data/2026/17xxx/CVE-2026-17240.json index 6987344491..09b956760f 100644 --- a/data/2026/17xxx/CVE-2026-17240.json +++ b/data/2026/17xxx/CVE-2026-17240.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-24T20:59:23.640Z", "datePublished": "2026-11-07T04:32:26.666Z", - "dateUpdated": "2026-11-07T04:32:26.666Z" + "dateUpdated": "2026-11-11T03:44:40.095Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:44:31.254601Z", + "id": "CVE-2026-17240", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:44:40.095Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17280.json b/data/2026/17xxx/CVE-2026-17280.json index d776f4cc60..36a8de3d84 100644 --- a/data/2026/17xxx/CVE-2026-17280.json +++ b/data/2026/17xxx/CVE-2026-17280.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T00:04:24.188Z", "datePublished": "2026-11-07T04:32:31.975Z", - "dateUpdated": "2026-11-07T04:32:31.975Z" + "dateUpdated": "2026-11-11T03:45:09.625Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:44:56.485517Z", + "id": "CVE-2026-17280", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:45:09.625Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17291.json b/data/2026/17xxx/CVE-2026-17291.json index 665f209b30..3f7dfbf6d8 100644 --- a/data/2026/17xxx/CVE-2026-17291.json +++ b/data/2026/17xxx/CVE-2026-17291.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T00:33:32.997Z", "datePublished": "2026-11-07T04:32:43.618Z", - "dateUpdated": "2026-11-07T04:32:43.618Z" + "dateUpdated": "2026-11-11T03:45:38.756Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:45:28.898639Z", + "id": "CVE-2026-17291", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:45:38.756Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17296.json b/data/2026/17xxx/CVE-2026-17296.json index 4554dc0ea1..2b05ab8447 100644 --- a/data/2026/17xxx/CVE-2026-17296.json +++ b/data/2026/17xxx/CVE-2026-17296.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T00:45:44.915Z", "datePublished": "2026-11-07T04:32:48.775Z", - "dateUpdated": "2026-11-07T04:32:48.775Z" + "dateUpdated": "2026-11-11T03:46:07.229Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:45:56.182967Z", + "id": "CVE-2026-17296", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:46:07.229Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17312.json b/data/2026/17xxx/CVE-2026-17312.json index 4c4bcfe190..30c4443200 100644 --- a/data/2026/17xxx/CVE-2026-17312.json +++ b/data/2026/17xxx/CVE-2026-17312.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T01:28:32.431Z", "datePublished": "2026-11-07T04:33:04.239Z", - "dateUpdated": "2026-11-07T04:33:04.239Z" + "dateUpdated": "2026-11-11T03:46:35.158Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:46:25.742978Z", + "id": "CVE-2026-17312", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:46:35.158Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17317.json b/data/2026/17xxx/CVE-2026-17317.json index 16b432b26d..872aad1ab7 100644 --- a/data/2026/17xxx/CVE-2026-17317.json +++ b/data/2026/17xxx/CVE-2026-17317.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T01:45:16.470Z", "datePublished": "2026-11-07T04:33:09.538Z", - "dateUpdated": "2026-11-07T04:33:09.538Z" + "dateUpdated": "2026-11-11T03:47:10.261Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:46:57.587183Z", + "id": "CVE-2026-17317", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:47:10.261Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17322.json b/data/2026/17xxx/CVE-2026-17322.json index f33bdc023e..374ddd522f 100644 --- a/data/2026/17xxx/CVE-2026-17322.json +++ b/data/2026/17xxx/CVE-2026-17322.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T01:58:07.214Z", "datePublished": "2026-11-07T04:33:14.685Z", - "dateUpdated": "2026-11-07T04:33:14.685Z" + "dateUpdated": "2026-11-11T03:47:45.513Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:47:34.952304Z", + "id": "CVE-2026-17322", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:47:45.513Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17327.json b/data/2026/17xxx/CVE-2026-17327.json index 6f5ebf4465..bc1d9cb16c 100644 --- a/data/2026/17xxx/CVE-2026-17327.json +++ b/data/2026/17xxx/CVE-2026-17327.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T02:09:42.869Z", "datePublished": "2026-11-07T04:33:19.844Z", - "dateUpdated": "2026-11-07T04:33:19.844Z" + "dateUpdated": "2026-11-11T03:48:34.546Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:48:24.332008Z", + "id": "CVE-2026-17327", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:48:34.546Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17332.json b/data/2026/17xxx/CVE-2026-17332.json index 90cb0985fc..2752b31167 100644 --- a/data/2026/17xxx/CVE-2026-17332.json +++ b/data/2026/17xxx/CVE-2026-17332.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T02:21:08.612Z", "datePublished": "2026-11-07T04:33:24.879Z", - "dateUpdated": "2026-11-07T04:33:24.879Z" + "dateUpdated": "2026-11-11T03:49:01.799Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:48:52.073815Z", + "id": "CVE-2026-17332", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:49:01.799Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17337.json b/data/2026/17xxx/CVE-2026-17337.json index b015b90fcc..a80aa19ae6 100644 --- a/data/2026/17xxx/CVE-2026-17337.json +++ b/data/2026/17xxx/CVE-2026-17337.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T02:33:32.504Z", "datePublished": "2026-11-07T04:33:29.970Z", - "dateUpdated": "2026-11-07T04:33:29.970Z" + "dateUpdated": "2026-11-11T03:49:56.806Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:49:45.245463Z", + "id": "CVE-2026-17337", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:49:56.806Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17353.json b/data/2026/17xxx/CVE-2026-17353.json index f9b911ab9a..67d93cee95 100644 --- a/data/2026/17xxx/CVE-2026-17353.json +++ b/data/2026/17xxx/CVE-2026-17353.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T02:56:26.715Z", "datePublished": "2026-11-07T04:33:40.164Z", - "dateUpdated": "2026-11-07T04:33:40.164Z" + "dateUpdated": "2026-11-11T03:50:26.994Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:50:17.112902Z", + "id": "CVE-2026-17353", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:50:26.994Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17358.json b/data/2026/17xxx/CVE-2026-17358.json index 450b7f94ae..c81af9c739 100644 --- a/data/2026/17xxx/CVE-2026-17358.json +++ b/data/2026/17xxx/CVE-2026-17358.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T03:10:20.422Z", "datePublished": "2026-11-07T04:33:45.939Z", - "dateUpdated": "2026-11-07T04:33:45.939Z" + "dateUpdated": "2026-11-11T03:51:54.428Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:51:44.958414Z", + "id": "CVE-2026-17358", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:51:54.428Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17365.json b/data/2026/17xxx/CVE-2026-17365.json index de81d1d1d0..12d0aacbe1 100644 --- a/data/2026/17xxx/CVE-2026-17365.json +++ b/data/2026/17xxx/CVE-2026-17365.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T03:27:26.036Z", "datePublished": "2026-11-07T04:33:52.142Z", - "dateUpdated": "2026-11-07T04:33:52.142Z" + "dateUpdated": "2026-11-11T03:52:25.218Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:52:14.753510Z", + "id": "CVE-2026-17365", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:52:25.218Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17370.json b/data/2026/17xxx/CVE-2026-17370.json index a66ff8c2c5..2e7730e74c 100644 --- a/data/2026/17xxx/CVE-2026-17370.json +++ b/data/2026/17xxx/CVE-2026-17370.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T03:45:42.748Z", "datePublished": "2026-11-07T04:33:57.250Z", - "dateUpdated": "2026-11-07T04:33:57.250Z" + "dateUpdated": "2026-11-11T03:52:56.272Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:52:46.374748Z", + "id": "CVE-2026-17370", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:52:56.272Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17380.json b/data/2026/17xxx/CVE-2026-17380.json index dae6cf0d58..e88b1381f8 100644 --- a/data/2026/17xxx/CVE-2026-17380.json +++ b/data/2026/17xxx/CVE-2026-17380.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T04:08:10.623Z", "datePublished": "2026-11-07T04:34:07.511Z", - "dateUpdated": "2026-11-07T04:34:07.511Z" + "dateUpdated": "2026-11-11T03:53:26.397Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:53:15.715172Z", + "id": "CVE-2026-17380", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:53:26.397Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17384.json b/data/2026/17xxx/CVE-2026-17384.json index 98e31a1414..47b66948ac 100644 --- a/data/2026/17xxx/CVE-2026-17384.json +++ b/data/2026/17xxx/CVE-2026-17384.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T04:17:13.780Z", "datePublished": "2026-11-07T04:40:55.983Z", - "dateUpdated": "2026-11-07T04:40:55.983Z" + "dateUpdated": "2026-11-11T03:54:44.432Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:54:33.909594Z", + "id": "CVE-2026-17384", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:54:44.432Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17398.json b/data/2026/17xxx/CVE-2026-17398.json index fc59417b16..a032afadf0 100644 --- a/data/2026/17xxx/CVE-2026-17398.json +++ b/data/2026/17xxx/CVE-2026-17398.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T04:50:38.548Z", "datePublished": "2026-11-07T04:34:22.709Z", - "dateUpdated": "2026-11-07T04:34:22.709Z" + "dateUpdated": "2026-11-11T03:54:11.917Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:54:02.635525Z", + "id": "CVE-2026-17398", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:54:11.917Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/26xxx/CVE-2026-26248.json b/data/2026/26xxx/CVE-2026-26248.json index 66728e66c4..d50b0405d2 100644 --- a/data/2026/26xxx/CVE-2026-26248.json +++ b/data/2026/26xxx/CVE-2026-26248.json @@ -8,7 +8,7 @@ "assignerShortName": "fortinet", "dateReserved": "2026-02-12T12:07:02.132Z", "datePublished": "2026-11-10T20:10:39.645Z", - "dateUpdated": "2026-11-10T20:10:39.645Z" + "dateUpdated": "2026-11-11T03:55:44.333Z" }, "containers": { "cna": { @@ -101,13 +101,13 @@ "descriptions": [ { "lang": "en", - "value": "A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to perform an XSS attack via social engineering and crafted HTTP requests." + "value": "A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to perform an XSS attack via social engineering and crafted HTTP requests." } ], "providerMetadata": { "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", - "dateUpdated": "2026-11-10T20:10:39.645Z" + "dateUpdated": "2026-11-11T03:55:44.333Z" }, "problemTypes": [ { diff --git a/data/2026/46xxx/CVE-2026-46429.json b/data/2026/46xxx/CVE-2026-46429.json index eb2696e872..2fed76b7da 100644 --- a/data/2026/46xxx/CVE-2026-46429.json +++ b/data/2026/46xxx/CVE-2026-46429.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-05-13T22:18:22.830Z", "datePublished": "2026-11-06T19:40:54.131Z", - "dateUpdated": "2026-11-06T19:40:54.131Z" + "dateUpdated": "2026-11-11T03:25:47.093Z" }, "containers": { "cna": { @@ -114,6 +114,40 @@ "advisory": "GHSA-fqpv-mq26-pr4j", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:25:34.772287Z", + "id": "CVE-2026-46429", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:25:47.093Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/54xxx/CVE-2026-54589.json b/data/2026/54xxx/CVE-2026-54589.json index b01fee7cf1..7426ca9ab3 100644 --- a/data/2026/54xxx/CVE-2026-54589.json +++ b/data/2026/54xxx/CVE-2026-54589.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-06-15T19:15:27.345Z", "datePublished": "2026-11-06T21:03:30.050Z", - "dateUpdated": "2026-11-06T21:03:30.050Z" + "dateUpdated": "2026-11-11T03:32:46.255Z" }, "containers": { "cna": { @@ -96,6 +96,48 @@ "advisory": "GHSA-6m7q-jmp7-3vw8", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-6m7q-jmp7-3vw8", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:32:23.316837Z", + "id": "CVE-2026-54589", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:32:46.255Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59171.json b/data/2026/59xxx/CVE-2026-59171.json index f9be015608..2aad87dac7 100644 --- a/data/2026/59xxx/CVE-2026-59171.json +++ b/data/2026/59xxx/CVE-2026-59171.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-07-02T16:50:27.888Z", "datePublished": "2026-11-06T20:12:34.624Z", - "dateUpdated": "2026-11-06T20:12:34.624Z" + "dateUpdated": "2026-11-11T03:27:27.596Z" }, "containers": { "cna": { @@ -131,6 +131,48 @@ "advisory": "GHSA-ghc9-756g-vrcv", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/stleary/JSON-java/security/advisories/GHSA-ghc9-756g-vrcv", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:27:02.959510Z", + "id": "CVE-2026-59171", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:27:27.596Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/61xxx/CVE-2026-61810.json b/data/2026/61xxx/CVE-2026-61810.json new file mode 100644 index 0000000000..f88230251d --- /dev/null +++ b/data/2026/61xxx/CVE-2026-61810.json @@ -0,0 +1,94 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-61810", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-07-10T20:17:57.991Z", + "datePublished": "2026-11-11T04:16:28.714Z", + "dateUpdated": "2026-11-11T04:16:28.714Z" + }, + "containers": { + "cna": { + "title": "libspdm: SPDM (DSP0274) FINISH transcript under-specifies the new 1.4 OpaqueData fields", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-325", + "lang": "en", + "description": "CWE-325: Missing Cryptographic Step", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV4_0": { + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 6, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", + "version": "4.0" + } + } + ], + "references": [ + { + "name": "https://github.com/DMTF/libspdm/security/advisories/GHSA-chjj-xvqx-c8w4", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/DMTF/libspdm/security/advisories/GHSA-chjj-xvqx-c8w4" + }, + { + "name": "https://github.com/DMTF/libspdm/issues/3633", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/DMTF/libspdm/issues/3633" + } + ], + "affected": [ + { + "vendor": "DMTF", + "product": "libspdm", + "versions": [ + { + "version": "= 1.4.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-11T04:16:28.714Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "libspdm is a sample implementation that follows the DMTF SPDM specifications. In version 1.4.0, both the FINISH request (Table 80) and the FINISH_RSP response (Table 81) gained two new fields, OpaqueDataLength and OpaqueData, placed before the trailing signed/authenticated field. The transcript definitions used to compute and verify the FINISH signature, the FINISH HMAC (RequesterVerifyData), and the FINISH_RSP HMAC (ResponderVerifyData) were not updated and still terminate with a step of the form. Per DSP0274, the \"SPDM Header Fields\" are only the four header bytes (SPDMVersion, RequestResponseCode, Param1, Param2). A literal reading therefore excludes OpaqueDataLength and OpaqueData, even though those fields are transmitted before the trailing signature/HMAC field. Because the signature/HMAC must cover every field transmitted before it to \"protect the entire handshake against manipulation by an active attacker,\" an active attacker could otherwise modify the opaque data in flight without invalidating the signature or HMAC. This issue has been patched in version 1.4.1." + } + ], + "source": { + "advisory": "GHSA-chjj-xvqx-c8w4", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/63xxx/CVE-2026-63440.json b/data/2026/63xxx/CVE-2026-63440.json index c7cbe98ef0..ad1e5576d8 100644 --- a/data/2026/63xxx/CVE-2026-63440.json +++ b/data/2026/63xxx/CVE-2026-63440.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-07-16T19:35:57.767Z", "datePublished": "2026-11-06T20:18:43.907Z", - "dateUpdated": "2026-11-06T20:18:43.907Z" + "dateUpdated": "2026-11-11T03:28:42.896Z" }, "containers": { "cna": { @@ -103,6 +103,48 @@ "advisory": "GHSA-22mh-gmrh-gpwg", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/Bubka/2FAuth/security/advisories/GHSA-22mh-gmrh-gpwg", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:28:14.595265Z", + "id": "CVE-2026-63440", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:28:42.896Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/63xxx/CVE-2026-63663.json b/data/2026/63xxx/CVE-2026-63663.json index b35419706f..97c48b8c05 100644 --- a/data/2026/63xxx/CVE-2026-63663.json +++ b/data/2026/63xxx/CVE-2026-63663.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-07-17T14:47:08.031Z", "datePublished": "2026-11-06T20:07:41.007Z", - "dateUpdated": "2026-11-06T20:07:41.007Z" + "dateUpdated": "2026-11-11T03:26:33.424Z" }, "containers": { "cna": { @@ -93,6 +93,40 @@ "advisory": "GHSA-8wr4-mh28-m992", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:26:23.098498Z", + "id": "CVE-2026-63663", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:26:33.424Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/64xxx/CVE-2026-64666.json b/data/2026/64xxx/CVE-2026-64666.json new file mode 100644 index 0000000000..5e8ffcdd9f --- /dev/null +++ b/data/2026/64xxx/CVE-2026-64666.json @@ -0,0 +1,112 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-64666", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-07-20T17:12:12.891Z", + "datePublished": "2026-11-11T03:51:12.232Z", + "dateUpdated": "2026-11-11T03:51:12.232Z" + }, + "containers": { + "cna": { + "title": "pam_usb: getenv() in pusb_local_login bypasses XRDP deny via env-var unset", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-807", + "lang": "en", + "description": "CWE-807: Reliance on Untrusted Inputs in a Security Decision", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "LOCAL", + "availabilityImpact": "NONE", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "LOW", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-ffx6-xjp6-x33g", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-ffx6-xjp6-x33g" + }, + { + "name": "https://github.com/mcdope/pam_usb/issues/410", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/issues/410" + }, + { + "name": "https://github.com/mcdope/pam_usb/pull/417", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/pull/417" + }, + { + "name": "https://github.com/mcdope/pam_usb/commit/0b179ed679d6522c6a571c5a8ae9bdc7edbad31f", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/commit/0b179ed679d6522c6a571c5a8ae9bdc7edbad31f" + }, + { + "name": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3" + } + ], + "affected": [ + { + "vendor": "mcdope", + "product": "pam_usb", + "versions": [ + { + "version": "< 0.9.3", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-11T03:51:12.232Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pam_usb provides hardware authentication for Linux using removable media. Prior to version 0.9.3, src/local.c reads XRDP_SESSION with plain getenv(3) at the head of pusb_local_login while every other env consumer in the same function uses secure_getenv(3). When pam_usb.so loads into a setuid PAM host, the calling user controls the environment passed in. Clearing XRDP_SESSION before invoking the host bypasses the explicit XRDP-deny rule. Other remote-detection signals (rmsvc, evdev, loginctl, utmp) may still catch the session, but the env-based detection alone is defeated. This issue has been patched in version 0.9.3." + } + ], + "source": { + "advisory": "GHSA-ffx6-xjp6-x33g", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/64xxx/CVE-2026-64667.json b/data/2026/64xxx/CVE-2026-64667.json new file mode 100644 index 0000000000..6477acd51c --- /dev/null +++ b/data/2026/64xxx/CVE-2026-64667.json @@ -0,0 +1,112 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-64667", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-07-20T17:12:12.891Z", + "datePublished": "2026-11-11T03:51:59.164Z", + "dateUpdated": "2026-11-11T03:51:59.164Z" + }, + "containers": { + "cna": { + "title": "pam_usb: Heap out-of-bounds read in pusb_get_tty_from_display_server cmdline scan", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-125", + "lang": "en", + "description": "CWE-125: Out-of-bounds Read", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "LOCAL", + "availabilityImpact": "LOW", + "baseScore": 4.4, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "privilegesRequired": "LOW", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-gc6f-5hpq-ghxh", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-gc6f-5hpq-ghxh" + }, + { + "name": "https://github.com/mcdope/pam_usb/issues/411", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/issues/411" + }, + { + "name": "https://github.com/mcdope/pam_usb/pull/426", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/pull/426" + }, + { + "name": "https://github.com/mcdope/pam_usb/commit/d0a2e716241304cdb069adfaf54d2ede629d57fa", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/commit/d0a2e716241304cdb069adfaf54d2ede629d57fa" + }, + { + "name": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3" + } + ], + "affected": [ + { + "vendor": "mcdope", + "product": "pam_usb", + "versions": [ + { + "version": "< 0.9.3", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-11T03:51:59.164Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pam_usb provides hardware authentication for Linux using removable media. Prior to version 0.9.3, src/local.c (pusb_get_tty_from_display_server) allocates a 4096-byte cmdline buffer, reads up to 4096 bytes from /proc//cmdline, then replaces every NUL separator with a space. When read(2) returns exactly 4096 bytes for any process the function inspects, the buffer ends without a terminator and the subsequent strstr() calls scan past the allocation boundary. The function is invoked during normal PAM authentication when DISPLAY is set, so the read fires for every process at auth time. Consequences are bounded: strstr output is a Boolean substring match (limited info-disclosure surface) but a hostile heap layout can produce a SIGSEGV that terminates the host PAM process. This issue has been patched in version 0.9.3." + } + ], + "source": { + "advisory": "GHSA-gc6f-5hpq-ghxh", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/64xxx/CVE-2026-64668.json b/data/2026/64xxx/CVE-2026-64668.json new file mode 100644 index 0000000000..ee13ce975f --- /dev/null +++ b/data/2026/64xxx/CVE-2026-64668.json @@ -0,0 +1,115 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-64668", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-07-20T17:12:12.891Z", + "datePublished": "2026-11-11T03:50:14.037Z", + "dateUpdated": "2026-11-11T03:50:14.037Z" + }, + "containers": { + "cna": { + "title": "pam_usb: deny_remote bypassed by zone-indexed IPv6 addresses (fe80::1%eth0) in pusb_tmux_has_remote_clients", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-285", + "lang": "en", + "description": "CWE-285: Improper Authorization", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693: Protection Mechanism Failure", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "HIGH", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 7.4, + "baseSeverity": "HIGH", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-7583-9cqv-j9rf", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-7583-9cqv-j9rf" + }, + { + "name": "https://github.com/mcdope/pam_usb/pull/423", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/pull/423" + }, + { + "name": "https://github.com/mcdope/pam_usb/commit/a62513f3da871d6576d751de3482eb80b9ac79f3", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/commit/a62513f3da871d6576d751de3482eb80b9ac79f3" + }, + { + "name": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3" + } + ], + "affected": [ + { + "vendor": "mcdope", + "product": "pam_usb", + "versions": [ + { + "version": ">= 0.8.0, < 0.9.3", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-11T03:50:14.037Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pam_usb provides hardware authentication for Linux using removable media. From version 0.8.0 to before version 0.9.3, the deny_remote feature in pam_usb uses /usr/bin/w -i to detect whether the authenticating user has an active remote tmux session. In pusb_tmux_has_remote_clients() (src/tmux.c), the IPv6 detection pattern matched the address group and then immediately expected whitespace. On Linux systems with multi-homed network interfaces, w -i appends a zone index (scope identifier) to link-local IPv6 addresses — e.g. fe80::1%eth0. The %eth0 suffix appeared between the address and the next whitespace field, causing the regex match to fail even for an otherwise-matching remote session. The function returned \"no remote clients\" and granted access. This issue has been patched in version 0.9.3." + } + ], + "source": { + "advisory": "GHSA-7583-9cqv-j9rf", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/64xxx/CVE-2026-64669.json b/data/2026/64xxx/CVE-2026-64669.json new file mode 100644 index 0000000000..4620be9a3f --- /dev/null +++ b/data/2026/64xxx/CVE-2026-64669.json @@ -0,0 +1,115 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-64669", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-07-20T17:12:12.891Z", + "datePublished": "2026-11-11T03:52:43.930Z", + "dateUpdated": "2026-11-11T03:52:43.930Z" + }, + "containers": { + "cna": { + "title": "pam_usb: deny_remote bypassed by compressed IPv6 addresses in pusb_tmux_has_remote_clients", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-285", + "lang": "en", + "description": "CWE-285: Improper Authorization", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693: Protection Mechanism Failure", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "HIGH", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 7.4, + "baseSeverity": "HIGH", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-gc4c-v52c-2v34", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-gc4c-v52c-2v34" + }, + { + "name": "https://github.com/mcdope/pam_usb/pull/423", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/pull/423" + }, + { + "name": "https://github.com/mcdope/pam_usb/commit/a62513f3da871d6576d751de3482eb80b9ac79f3", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/commit/a62513f3da871d6576d751de3482eb80b9ac79f3" + }, + { + "name": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/mcdope/pam_usb/releases/tag/0.9.3" + } + ], + "affected": [ + { + "vendor": "mcdope", + "product": "pam_usb", + "versions": [ + { + "version": ">= 0.8.0, < 0.9.3", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-11T03:52:43.930Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pam_usb provides hardware authentication for Linux using removable media. From version 0.8.0 to before version 0.9.3, the deny_remote feature in pam_usb uses /usr/bin/w -i to detect whether the authenticating user has an active remote tmux session. In pusb_tmux_has_remote_clients() (src/tmux.c), the IPv6 detection regex required exactly four explicit colon-separated groups of 1-4 hex digits (e.g. 2001:0db8:85a3:0000). Any IPv6 address in compressed notation — including loopback (::1), link-local (fe80::1), and global unicast addresses (2001:db8::1) — did not match this pattern. As a result the remote-client check silently returned \"no remote clients\" even when a remote tmux client was connected from such an address. This issue has been patched in version 0.9.3." + } + ], + "source": { + "advisory": "GHSA-gc4c-v52c-2v34", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/64xxx/CVE-2026-64670.json b/data/2026/64xxx/CVE-2026-64670.json new file mode 100644 index 0000000000..aaabe57ea8 --- /dev/null +++ b/data/2026/64xxx/CVE-2026-64670.json @@ -0,0 +1,94 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-64670", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-07-20T17:12:12.891Z", + "datePublished": "2026-11-11T03:42:22.276Z", + "dateUpdated": "2026-11-11T03:42:22.276Z" + }, + "containers": { + "cna": { + "title": "Stored XSS in @waline/client via the unsanitized markdown preview of a comment's raw body on edit", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "lang": "en", + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-116", + "lang": "en", + "description": "CWE-116: Improper Encoding or Escaping of Output", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "NONE", + "scope": "CHANGED", + "userInteraction": "REQUIRED", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/walinejs/waline/security/advisories/GHSA-crj3-q72p-ggqm", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/walinejs/waline/security/advisories/GHSA-crj3-q72p-ggqm" + } + ], + "affected": [ + { + "vendor": "walinejs", + "product": "waline", + "versions": [ + { + "version": "<= 3.15.2", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-11T03:42:22.276Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "Waline is a comment system with backend support. In versions 3.15.2 and prior, @waline/client renders the comment editor's live preview with marked and no sanitizer (utils/markdown.ts), and the preview is injected with v-html. When a comment is edited, the editor is seeded with the comment's raw, un-sanitized body (orig). Only administrators and the comment owner can edit. So an administrator who clicks Edit on an attacker's comment renders that attacker's raw HTML in their own session: an unauthenticated commenter achieves privilege-escalation stored XSS against a moderator with a single Edit click. At time of publication, there are no publicly available patches." + } + ], + "source": { + "advisory": "GHSA-crj3-q72p-ggqm", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/64xxx/CVE-2026-64671.json b/data/2026/64xxx/CVE-2026-64671.json new file mode 100644 index 0000000000..1bdab1c0d2 --- /dev/null +++ b/data/2026/64xxx/CVE-2026-64671.json @@ -0,0 +1,94 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-64671", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-07-20T17:12:12.891Z", + "datePublished": "2026-11-11T03:42:13.103Z", + "dateUpdated": "2026-11-11T03:42:13.103Z" + }, + "containers": { + "cna": { + "title": "Stored XSS in the @waline/client UserList widget via an unescaped commenter link field", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "lang": "en", + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-116", + "lang": "en", + "description": "CWE-116: Improper Encoding or Escaping of Output", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "privilegesRequired": "NONE", + "scope": "CHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/walinejs/waline/security/advisories/GHSA-7w94-hxwm-gg99", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/walinejs/waline/security/advisories/GHSA-7w94-hxwm-gg99" + } + ], + "affected": [ + { + "vendor": "walinejs", + "product": "waline", + "versions": [ + { + "version": "<= 3.15.2", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-11T03:42:13.103Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "Waline is a comment system with backend support. In versions 3.15.2 and prior, the @waline/client UserList widget builds its DOM by concatenating server-returned commenter fields directly into root.innerHTML with no HTML escaping. The commenter nick and link are stored and returned verbatim by the server (only the comment body is sanitized), and the link field is never sent to the spam filter. So an unauthenticated visitor who posts a comment with link = x\"> achieves stored cross-site scripting that executes, with no interaction, in the browser of every visitor to a page that embeds the UserList widget. At time of publication, there are no publicly available patches." + } + ], + "source": { + "advisory": "GHSA-7w94-hxwm-gg99", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/64xxx/CVE-2026-64678.json b/data/2026/64xxx/CVE-2026-64678.json new file mode 100644 index 0000000000..b8644ac87f --- /dev/null +++ b/data/2026/64xxx/CVE-2026-64678.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-64678", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-07-20T17:12:12.892Z", + "datePublished": "2026-11-11T04:07:12.719Z", + "dateUpdated": "2026-11-11T04:07:12.719Z" + }, + "containers": { + "cna": { + "title": "Nitrite: Unfiltered Java Deserialization in Legacy v1 Database Migration Path", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-502", + "lang": "en", + "description": "CWE-502: Deserialization of Untrusted Data", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/nitrite/nitrite-java/security/advisories/GHSA-9297-g93h-86gg", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/nitrite/nitrite-java/security/advisories/GHSA-9297-g93h-86gg" + }, + { + "name": "https://github.com/nitrite/nitrite-java/releases/tag/v4.4.1", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/nitrite/nitrite-java/releases/tag/v4.4.1" + } + ], + "affected": [ + { + "vendor": "nitrite", + "product": "nitrite-java", + "versions": [ + { + "version": "< 4.4.1", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-11T04:07:12.719Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "NOsql Object (NO2 a.k.a Nitrite) database is an open source nosql embedded document store. Prior to version 4.4.1, when Nitrite opens a database file, MVStoreUtils.openOrCreate() automatically checks for a legacy v1-format store and, on detecting one (or hitting a compatibility error while opening), triggers an automatic migration path. This path deserializes stored values using NitriteDataType.deserialize(byte[]), which passes the raw bytes directly to java.io.ObjectInputStream.readObject() via a custom NitriteObjectInputStream subclass. That subclass overrides only readClassDescriptor() — solely to remap a handful of known legacy class names to their current equivalents — and implements no class allowlist, blocklist, or ObjectInputFilter (JEP 290). Any Serializable class reachable on the embedding application's classpath can therefore be instantiated via readObject(), with readObject()/readExternal()/readResolve() callbacks invoked unconditionally. If a suitable gadget class (e.g. from commons-collections or similar) happens to be present on the classpath, this is a precondition for remote code execution. This issue has been patched in version 4.4.1." + } + ], + "source": { + "advisory": "GHSA-9297-g93h-86gg", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/64xxx/CVE-2026-64682.json b/data/2026/64xxx/CVE-2026-64682.json new file mode 100644 index 0000000000..fc26ce55b0 --- /dev/null +++ b/data/2026/64xxx/CVE-2026-64682.json @@ -0,0 +1,115 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-64682", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-07-20T17:12:12.892Z", + "datePublished": "2026-11-11T04:04:09.388Z", + "dateUpdated": "2026-11-11T04:04:09.388Z" + }, + "containers": { + "cna": { + "title": "AstroBlocks: Admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-321", + "lang": "en", + "description": "CWE-321: Use of Hard-coded Cryptographic Key", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-798", + "lang": "en", + "description": "CWE-798: Use of Hard-coded Credentials", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/NauelG/astro-blocks/security/advisories/GHSA-mfcg-m7j5-7v72", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/NauelG/astro-blocks/security/advisories/GHSA-mfcg-m7j5-7v72" + }, + { + "name": "https://github.com/NauelG/astro-blocks/pull/51", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/NauelG/astro-blocks/pull/51" + }, + { + "name": "https://github.com/NauelG/astro-blocks/commit/fd83bf0b37a756363f718e134c16e448da09a74d", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/NauelG/astro-blocks/commit/fd83bf0b37a756363f718e134c16e448da09a74d" + }, + { + "name": "https://github.com/NauelG/astro-blocks/releases/tag/v3.4.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/NauelG/astro-blocks/releases/tag/v3.4.0" + } + ], + "affected": [ + { + "vendor": "NauelG", + "product": "astro-blocks", + "versions": [ + { + "version": "< 3.4.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-11T04:04:09.388Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "AstroBlocks is a block-first CMS for Astro projects. Prior to version 3.4.0, admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name. An attacker who knows the public fallback value (readable in the published package) can forge a valid session token with role: \"owner\" and obtain full administrative control of the CMS — creating/deleting content, users, media, redirects, and configuration. This issue has been patched in version 3.4.0." + } + ], + "source": { + "advisory": "GHSA-mfcg-m7j5-7v72", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/64xxx/CVE-2026-64686.json b/data/2026/64xxx/CVE-2026-64686.json new file mode 100644 index 0000000000..ccf43916b3 --- /dev/null +++ b/data/2026/64xxx/CVE-2026-64686.json @@ -0,0 +1,102 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-64686", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-07-20T17:12:12.892Z", + "datePublished": "2026-11-11T04:10:36.576Z", + "dateUpdated": "2026-11-11T04:10:36.576Z" + }, + "containers": { + "cna": { + "title": "OpenSearch Dashboards: SSRF in fetchDataSourceMetaData — missing endpoint validation", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-918", + "lang": "en", + "description": "CWE-918: Server-Side Request Forgery", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 5, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "privilegesRequired": "LOW", + "scope": "CHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/opensearch-project/OpenSearch-Dashboards/security/advisories/GHSA-6qp6-3675-ffr3", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/opensearch-project/OpenSearch-Dashboards/security/advisories/GHSA-6qp6-3675-ffr3" + }, + { + "name": "https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/2.19.6", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/2.19.6" + }, + { + "name": "https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/3.7.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/3.7.0" + } + ], + "affected": [ + { + "vendor": "opensearch-project", + "product": "OpenSearch-Dashboards", + "versions": [ + { + "version": ">= 2.14.0, < 2.19.6", + "status": "affected" + }, + { + "version": ">= 3.0.0, < 3.7.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-11T04:10:36.576Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From versions 2.14.0 to before 2.19.6, and 3.0.0 to before 3.7.0, a Server-Side Request Forgery (SSRF) vulnerability in OpenSearch Dashboards exists in the fetchDataSourceMetaData route. The sibling test_connection route validates incoming endpoint URLs via isValidURL() against configured endpointDeniedIPs and endpointAllowlistedSuffixes lists, but fetchDataSourceMetaData accepts the same input shape without performing this validation. An authenticated user can supply an internal or loopback endpoint to probe internal network resources. This issue has been patched in versions 2.19.6 and 3.7.0." + } + ], + "source": { + "advisory": "GHSA-6qp6-3675-ffr3", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/68xxx/CVE-2026-68935.json b/data/2026/68xxx/CVE-2026-68935.json index 4b6326ab56..5cf4295b36 100644 --- a/data/2026/68xxx/CVE-2026-68935.json +++ b/data/2026/68xxx/CVE-2026-68935.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-07-31T21:49:24.927Z", "datePublished": "2026-11-06T21:15:35.795Z", - "dateUpdated": "2026-11-06T21:15:35.795Z" + "dateUpdated": "2026-11-11T03:37:34.598Z" }, "containers": { "cna": { @@ -93,6 +93,48 @@ "advisory": "GHSA-4q3v-5r7x-58q2", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-4q3v-5r7x-58q2", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:37:11.583928Z", + "id": "CVE-2026-68935", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:37:34.598Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/85xxx/CVE-2026-85726.json b/data/2026/85xxx/CVE-2026-85726.json index 3fadcec3cb..d67e96dff9 100644 --- a/data/2026/85xxx/CVE-2026-85726.json +++ b/data/2026/85xxx/CVE-2026-85726.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-09-04T14:45:10.648Z", "datePublished": "2026-11-06T21:08:18.807Z", - "dateUpdated": "2026-11-06T21:08:18.807Z" + "dateUpdated": "2026-11-11T03:34:11.202Z" }, "containers": { "cna": { @@ -93,6 +93,48 @@ "advisory": "GHSA-mr45-2r9x-cgwf", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-mr45-2r9x-cgwf", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-11T03:33:33.370820Z", + "id": "CVE-2026-85726", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-11T03:34:11.202Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/92xxx/CVE-2026-92092.json b/data/2026/92xxx/CVE-2026-92092.json index 3fc540db36..b3e14f485e 100644 --- a/data/2026/92xxx/CVE-2026-92092.json +++ b/data/2026/92xxx/CVE-2026-92092.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-15T14:34:28.814Z", "datePublished": "2026-10-29T19:51:44.996Z", - "dateUpdated": "2026-11-09T22:38:26.641Z" + "dateUpdated": "2026-11-11T03:26:54.451Z" }, "containers": { "cna": { @@ -86,6 +86,25 @@ "cpe:/a:redhat:openshift:4.16::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.17", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "openshift-ansible", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:4.17.0-202611050920.p2.gf11de04.assembly.stream.el8", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.17::el8", + "cpe:/a:redhat:openshift:4.17::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.18", @@ -141,6 +160,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96281", + "name": "RHSA-2026:96281", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-92092", "tags": [ @@ -192,7 +219,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-09T22:38:26.641Z" + "dateUpdated": "2026-11-11T03:26:54.451Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/delta.json b/data/delta.json index dab8db67fd..70b9e8ead3 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,176 +1,50 @@ { - "fetchTime": "2026-11-11T03:17:12.413Z", - "numberOfChanges": 28, + "fetchTime": "2026-11-11T04:17:18.554Z", + "numberOfChanges": 7, "new": [ { - "cveId": "CVE-2026-97033", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97033", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97033.json", - "dateUpdated": "2026-11-11T03:13:17.601Z" + "cveId": "CVE-2026-61810", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61810", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61810.json", + "dateUpdated": "2026-11-11T04:16:28.714Z" }, { - "cveId": "CVE-2026-97034", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97034", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97034.json", - "dateUpdated": "2026-11-11T03:13:17.194Z" + "cveId": "CVE-2026-64678", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64678", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64678.json", + "dateUpdated": "2026-11-11T04:07:12.719Z" }, { - "cveId": "CVE-2026-97035", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97035", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97035.json", - "dateUpdated": "2026-11-11T03:13:16.798Z" - }, - { - "cveId": "CVE-2026-97036", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97036", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97036.json", - "dateUpdated": "2026-11-11T03:13:16.347Z" - }, - { - "cveId": "CVE-2026-97037", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97037", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97037.json", - "dateUpdated": "2026-11-11T03:13:16.142Z" - }, - { - "cveId": "CVE-2026-97038", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97038", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97038.json", - "dateUpdated": "2026-11-11T03:13:15.930Z" - }, - { - "cveId": "CVE-2026-97039", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97039", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97039.json", - "dateUpdated": "2026-11-11T03:13:15.684Z" - }, - { - "cveId": "CVE-2026-97040", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97040", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97040.json", - "dateUpdated": "2026-11-11T03:13:15.477Z" - }, - { - "cveId": "CVE-2026-97041", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97041", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97041.json", - "dateUpdated": "2026-11-11T03:13:15.269Z" - }, - { - "cveId": "CVE-2026-97042", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97042", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97042.json", - "dateUpdated": "2026-11-11T03:13:15.060Z" - }, - { - "cveId": "CVE-2026-97043", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97043", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97043.json", - "dateUpdated": "2026-11-11T03:13:14.827Z" - }, - { - "cveId": "CVE-2026-97054", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97054", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97054.json", - "dateUpdated": "2026-11-11T03:13:17.877Z" + "cveId": "CVE-2026-64686", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64686", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64686.json", + "dateUpdated": "2026-11-11T04:10:36.576Z" } ], "updated": [ { - "cveId": "CVE-2026-102359", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102359", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102359.json", - "dateUpdated": "2026-11-11T03:13:53.054Z" + "cveId": "CVE-2026-123495", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123495", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123495.json", + "dateUpdated": "2026-11-11T04:05:04.826Z" }, { - "cveId": "CVE-2026-108262", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108262", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108262.json", - "dateUpdated": "2026-11-11T03:16:39.472Z" + "cveId": "CVE-2026-123499", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123499", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123499.json", + "dateUpdated": "2026-11-11T04:05:52.242Z" }, { - "cveId": "CVE-2026-118515", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118515", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118515.json", - "dateUpdated": "2026-11-11T03:10:02.952Z" + "cveId": "CVE-2026-123503", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123503", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123503.json", + "dateUpdated": "2026-11-11T04:06:33.979Z" }, { - "cveId": "CVE-2026-123622", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123622", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123622.json", - "dateUpdated": "2026-11-11T03:05:29.613Z" - }, - { - "cveId": "CVE-2026-123623", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123623", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123623.json", - "dateUpdated": "2026-11-11T03:07:33.112Z" - }, - { - "cveId": "CVE-2026-123676", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123676", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123676.json", - "dateUpdated": "2026-11-11T03:08:22.186Z" - }, - { - "cveId": "CVE-2026-123784", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123784", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123784.json", - "dateUpdated": "2026-11-11T03:06:39.965Z" - }, - { - "cveId": "CVE-2026-33818", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33818", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33818.json", - "dateUpdated": "2026-11-11T03:13:09.554Z" - }, - { - "cveId": "CVE-2026-42504", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42504", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42504.json", - "dateUpdated": "2026-11-11T03:13:08.033Z" - }, - { - "cveId": "CVE-2026-62344", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62344", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62344.json", - "dateUpdated": "2026-11-11T03:15:45.502Z" - }, - { - "cveId": "CVE-2026-62850", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62850", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62850.json", - "dateUpdated": "2026-11-11T03:12:03.535Z" - }, - { - "cveId": "CVE-2026-62854", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62854", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62854.json", - "dateUpdated": "2026-11-11T03:10:52.935Z" - }, - { - "cveId": "CVE-2026-85743", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85743", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85743.json", - "dateUpdated": "2026-11-11T03:13:02.881Z" - }, - { - "cveId": "CVE-2026-89017", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89017", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89017.json", - "dateUpdated": "2026-11-11T03:14:46.350Z" - }, - { - "cveId": "CVE-2026-96275", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96275", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96275.json", - "dateUpdated": "2026-11-11T03:10:26.245Z" - }, - { - "cveId": "CVE-2026-96280", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96280", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96280.json", - "dateUpdated": "2026-11-11T03:10:34.489Z" + "cveId": "CVE-2026-124057", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124057", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124057.json", + "dateUpdated": "2026-11-11T04:04:19.822Z" } ], "error": [] diff --git a/data/deltaLog.json b/data/deltaLog.json index 857e52c149..edf75ff3f1 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,457 @@ [ + { + "fetchTime": "2026-11-11T04:17:18.554Z", + "numberOfChanges": 7, + "new": [ + { + "cveId": "CVE-2026-61810", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61810", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61810.json", + "dateUpdated": "2026-11-11T04:16:28.714Z" + }, + { + "cveId": "CVE-2026-64678", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64678", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64678.json", + "dateUpdated": "2026-11-11T04:07:12.719Z" + }, + { + "cveId": "CVE-2026-64686", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64686", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64686.json", + "dateUpdated": "2026-11-11T04:10:36.576Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-123495", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123495", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123495.json", + "dateUpdated": "2026-11-11T04:05:04.826Z" + }, + { + "cveId": "CVE-2026-123499", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123499", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123499.json", + "dateUpdated": "2026-11-11T04:05:52.242Z" + }, + { + "cveId": "CVE-2026-123503", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123503", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123503.json", + "dateUpdated": "2026-11-11T04:06:33.979Z" + }, + { + "cveId": "CVE-2026-124057", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124057", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124057.json", + "dateUpdated": "2026-11-11T04:04:19.822Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-11T04:04:16.657Z", + "numberOfChanges": 7, + "new": [ + { + "cveId": "CVE-2026-64682", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64682", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64682.json", + "dateUpdated": "2026-11-11T04:04:09.388Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-120857", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120857", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120857.json", + "dateUpdated": "2026-11-11T03:57:57.652Z" + }, + { + "cveId": "CVE-2026-123963", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123963", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123963.json", + "dateUpdated": "2026-11-11T03:58:38.261Z" + }, + { + "cveId": "CVE-2026-123989", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123989", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123989.json", + "dateUpdated": "2026-11-11T04:03:17.507Z" + }, + { + "cveId": "CVE-2026-124309", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124309", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124309.json", + "dateUpdated": "2026-11-11T03:59:43.169Z" + }, + { + "cveId": "CVE-2026-124313", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124313", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124313.json", + "dateUpdated": "2026-11-11T04:01:32.154Z" + }, + { + "cveId": "CVE-2026-124317", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124317", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124317.json", + "dateUpdated": "2026-11-11T04:02:24.741Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-11T03:57:02.759Z", + "numberOfChanges": 12, + "new": [ + { + "cveId": "CVE-2026-64666", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64666", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64666.json", + "dateUpdated": "2026-11-11T03:51:12.232Z" + }, + { + "cveId": "CVE-2026-64667", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64667", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64667.json", + "dateUpdated": "2026-11-11T03:51:59.164Z" + }, + { + "cveId": "CVE-2026-64669", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64669", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64669.json", + "dateUpdated": "2026-11-11T03:52:43.930Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-119494", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119494", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119494.json", + "dateUpdated": "2026-11-11T03:56:16.622Z" + }, + { + "cveId": "CVE-2026-123958", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123958", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123958.json", + "dateUpdated": "2026-11-11T03:55:42.848Z" + }, + { + "cveId": "CVE-2026-17358", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17358", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17358.json", + "dateUpdated": "2026-11-11T03:51:54.428Z" + }, + { + "cveId": "CVE-2026-17365", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17365", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17365.json", + "dateUpdated": "2026-11-11T03:52:25.218Z" + }, + { + "cveId": "CVE-2026-17370", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17370", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17370.json", + "dateUpdated": "2026-11-11T03:52:56.272Z" + }, + { + "cveId": "CVE-2026-17380", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17380", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17380.json", + "dateUpdated": "2026-11-11T03:53:26.397Z" + }, + { + "cveId": "CVE-2026-17384", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17384", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17384.json", + "dateUpdated": "2026-11-11T03:54:44.432Z" + }, + { + "cveId": "CVE-2026-17398", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17398", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17398.json", + "dateUpdated": "2026-11-11T03:54:11.917Z" + }, + { + "cveId": "CVE-2026-26248", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-26248", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/26xxx/CVE-2026-26248.json", + "dateUpdated": "2026-11-11T03:55:44.333Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-11T03:50:54.546Z", + "numberOfChanges": 11, + "new": [ + { + "cveId": "CVE-2026-64668", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64668", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64668.json", + "dateUpdated": "2026-11-11T03:50:14.037Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-17280", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17280", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17280.json", + "dateUpdated": "2026-11-11T03:45:09.625Z" + }, + { + "cveId": "CVE-2026-17291", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17291", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17291.json", + "dateUpdated": "2026-11-11T03:45:38.756Z" + }, + { + "cveId": "CVE-2026-17296", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17296", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17296.json", + "dateUpdated": "2026-11-11T03:46:07.229Z" + }, + { + "cveId": "CVE-2026-17312", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17312", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17312.json", + "dateUpdated": "2026-11-11T03:46:35.158Z" + }, + { + "cveId": "CVE-2026-17317", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17317", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17317.json", + "dateUpdated": "2026-11-11T03:47:10.261Z" + }, + { + "cveId": "CVE-2026-17322", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17322", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17322.json", + "dateUpdated": "2026-11-11T03:47:45.513Z" + }, + { + "cveId": "CVE-2026-17327", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17327", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17327.json", + "dateUpdated": "2026-11-11T03:48:34.546Z" + }, + { + "cveId": "CVE-2026-17332", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17332", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17332.json", + "dateUpdated": "2026-11-11T03:49:01.799Z" + }, + { + "cveId": "CVE-2026-17337", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17337", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17337.json", + "dateUpdated": "2026-11-11T03:49:56.806Z" + }, + { + "cveId": "CVE-2026-17353", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17353", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17353.json", + "dateUpdated": "2026-11-11T03:50:26.994Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-11T03:44:58.064Z", + "numberOfChanges": 11, + "new": [ + { + "cveId": "CVE-2026-64670", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64670", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64670.json", + "dateUpdated": "2026-11-11T03:42:22.276Z" + }, + { + "cveId": "CVE-2026-64671", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64671", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64671.json", + "dateUpdated": "2026-11-11T03:42:13.103Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-103022", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103022", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103022.json", + "dateUpdated": "2026-11-11T03:39:17.860Z" + }, + { + "cveId": "CVE-2026-108178", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108178", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108178.json", + "dateUpdated": "2026-11-11T03:39:48.143Z" + }, + { + "cveId": "CVE-2026-16884", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16884", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16884.json", + "dateUpdated": "2026-11-11T03:40:26.186Z" + }, + { + "cveId": "CVE-2026-17062", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17062", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17062.json", + "dateUpdated": "2026-11-11T03:41:01.200Z" + }, + { + "cveId": "CVE-2026-17146", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17146", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17146.json", + "dateUpdated": "2026-11-11T03:41:32.000Z" + }, + { + "cveId": "CVE-2026-17190", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17190", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17190.json", + "dateUpdated": "2026-11-11T03:42:11.342Z" + }, + { + "cveId": "CVE-2026-17225", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17225", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17225.json", + "dateUpdated": "2026-11-11T03:42:56.593Z" + }, + { + "cveId": "CVE-2026-17233", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17233", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17233.json", + "dateUpdated": "2026-11-11T03:44:12.772Z" + }, + { + "cveId": "CVE-2026-17240", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17240", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17240.json", + "dateUpdated": "2026-11-11T03:44:40.095Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-11T03:38:58.899Z", + "numberOfChanges": 5, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-104267", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104267", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104267.json", + "dateUpdated": "2026-11-11T03:38:32.723Z" + }, + { + "cveId": "CVE-2026-123788", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123788", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123788.json", + "dateUpdated": "2026-11-11T03:36:37.238Z" + }, + { + "cveId": "CVE-2026-54589", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-54589", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/54xxx/CVE-2026-54589.json", + "dateUpdated": "2026-11-11T03:32:46.255Z" + }, + { + "cveId": "CVE-2026-68935", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-68935", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68935.json", + "dateUpdated": "2026-11-11T03:37:34.598Z" + }, + { + "cveId": "CVE-2026-85726", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85726", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85726.json", + "dateUpdated": "2026-11-11T03:34:11.202Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-11T03:31:55.047Z", + "numberOfChanges": 6, + "new": [], + "updated": [ + { + "cveId": "CVE-2025-55002", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-55002", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55002.json", + "dateUpdated": "2026-11-11T03:29:50.069Z" + }, + { + "cveId": "CVE-2026-102657", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102657", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102657.json", + "dateUpdated": "2026-11-11T03:30:44.632Z" + }, + { + "cveId": "CVE-2026-59171", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59171", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59171.json", + "dateUpdated": "2026-11-11T03:27:27.596Z" + }, + { + "cveId": "CVE-2026-63440", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63440", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63440.json", + "dateUpdated": "2026-11-11T03:28:42.896Z" + }, + { + "cveId": "CVE-2026-63663", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63663", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63663.json", + "dateUpdated": "2026-11-11T03:26:33.424Z" + }, + { + "cveId": "CVE-2026-92092", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92092", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92092.json", + "dateUpdated": "2026-11-11T03:26:54.451Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-11T03:25:51.388Z", + "numberOfChanges": 5, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-123995", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123995", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123995.json", + "dateUpdated": "2026-11-11T03:19:46.980Z" + }, + { + "cveId": "CVE-2026-124025", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124025", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124025.json", + "dateUpdated": "2026-11-11T03:22:20.366Z" + }, + { + "cveId": "CVE-2026-124029", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124029", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124029.json", + "dateUpdated": "2026-11-11T03:24:01.593Z" + }, + { + "cveId": "CVE-2026-124040", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124040", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124040.json", + "dateUpdated": "2026-11-11T03:24:56.121Z" + }, + { + "cveId": "CVE-2026-46429", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-46429", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/46xxx/CVE-2026-46429.json", + "dateUpdated": "2026-11-11T03:25:47.093Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-11T03:17:12.413Z", "numberOfChanges": 28, @@ -831582,58 +832035,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-12T04:05:20.424Z", - "numberOfChanges": 2, - "new": [ - { - "cveId": "CVE-2026-108797", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108797", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108797.json", - "dateUpdated": "2026-10-12T03:45:09.489Z" - }, - { - "cveId": "CVE-2026-108798", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108798", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108798.json", - "dateUpdated": "2026-10-12T04:00:12.485Z" - } - ], - "updated": [], - "error": [] - }, - { - "fetchTime": "2026-10-12T03:41:41.501Z", - "numberOfChanges": 4, - "new": [ - { - "cveId": "CVE-2026-108795", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108795", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108795.json", - "dateUpdated": "2026-10-12T03:15:11.391Z" - }, - { - "cveId": "CVE-2026-108796", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108796", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108796.json", - "dateUpdated": "2026-10-12T03:30:15.059Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-96275", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96275", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96275.json", - "dateUpdated": "2026-10-12T03:12:49.636Z" - }, - { - "cveId": "CVE-2026-96280", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96280", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96280.json", - "dateUpdated": "2026-10-12T03:12:49.622Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 2305ee87c0..cf48a6e9dd 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "ab59152b3a36e1cd4d740b8ecab41708e3724edc", + "upstream_commit": "50b688d6a29fb7ccfdff07f49fbf6452a0f10840", "since_year": 2017, - "records": 330766, - "synced_at_utc": "2026-11-11T03:30:01.397772+00:00" + "records": 330776, + "synced_at_utc": "2026-11-11T04:29:57.065770+00:00" }