From 81df67f91c6c720cc6aeb5d0e65d76ac8a02d7f5 Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Sat, 14 Nov 2026 09:32:03 +0100 Subject: [PATCH] CVE sync 2026-11-14T08:31:58Z --- data/2026/84xxx/CVE-2026-84761.json | 124 ++++++++++++++-------------- data/delta.json | 14 ++-- data/deltaLog.json | 71 ++++------------ state/sync.json | 4 +- 4 files changed, 84 insertions(+), 129 deletions(-) diff --git a/data/2026/84xxx/CVE-2026-84761.json b/data/2026/84xxx/CVE-2026-84761.json index 84b3820775..48edba0f62 100644 --- a/data/2026/84xxx/CVE-2026-84761.json +++ b/data/2026/84xxx/CVE-2026-84761.json @@ -8,52 +8,43 @@ "assignerShortName": "Patchstack", "dateReserved": "2026-09-02T09:57:31.410Z", "datePublished": "2026-09-03T16:31:47.490Z", - "dateUpdated": "2026-09-04T13:42:54.385Z" + "dateUpdated": "2026-11-14T07:41:35.639Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", - "dateUpdated": "2026-09-03T16:31:47.490Z" + "dateUpdated": "2026-11-14T07:41:35.639Z" }, "title": "WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability", - "problemTypes": [ + "datePublic": "2026-09-02T10:41:15.000Z", + "descriptions": [ { - "descriptions": [ + "lang": "en", + "value": "Server-Side Request Forgery (SSRF) vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespeed-cache allows Server Side Request Forgery.This issue affects LiteSpeed Cache: from n/a through 7.9.", + "supportingMedia": [ { - "lang": "en", - "cweId": "CWE-918", - "description": "CWE-918 Server-Side Request Forgery (SSRF)", - "type": "CWE" - } - ] - } - ], - "impacts": [ - { - "capecId": "CAPEC-664", - "descriptions": [ - { - "lang": "en", - "value": "CAPEC-664 Server Side Request Forgery" + "type": "text/html", + "base64": false, + "value": "Server-Side Request Forgery (SSRF) vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespeed-cache allows Server Side Request Forgery.

This issue affects LiteSpeed Cache: from n/a through 7.9.

" } ] } ], "affected": [ { - "vendor": "LiteSpeed Technologies", + "vendor": "Hai Zheng / Lite Speed Cache", + "product": "LiteSpeed Cache", + "packageName": "litespeed-cache", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", - "packageName": "litespeed-cache", - "product": "LiteSpeed Cache", "versions": [ { - "lessThanOrEqual": "7.9", - "status": "affected", - "version": "n/a", + "version": "0", "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "7.9", "changes": [ { "at": "7.9.1", @@ -64,25 +55,19 @@ ] } ], - "descriptions": [ - { - "lang": "en", - "supportingMedia": [ - { - "base64": false, - "type": "text/html", - "value": "Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions." - } - ], - "value": "Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions." - } - ], "references": [ { + "url": "https://patchstack.com/database/wordpress/plugin/litespeed-cache/vulnerability/wordpress-litespeed-cache-plugin-7-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve", "tags": [ "vdb-entry" - ], - "url": "https://patchstack.com/database/wordpress/plugin/litespeed-cache/vulnerability/wordpress-litespeed-cache-plugin-7-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "sicksec | Patchstack Bug Bounty Program", + "type": "finder" } ], "metrics": [ @@ -95,6 +80,10 @@ } ], "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 7.2, + "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", @@ -102,41 +91,50 @@ "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", - "availabilityImpact": "NONE", - "version": "3.1", - "baseSeverity": "HIGH", - "baseScore": 7.2, - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" + "availabilityImpact": "NONE" } } ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-918", + "description": "Server-Side Request Forgery (SSRF)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-664", + "descriptions": [ + { + "lang": "en", + "value": "Server Side Request Forgery" + } + ] + } + ], "solutions": [ { "lang": "en", + "value": "Update the WordPress LiteSpeed Cache plugin to the latest available version (at least 7.9.1).", "supportingMedia": [ { - "base64": false, "type": "text/html", - "value": "Update the WordPress LiteSpeed Cache Plugin to the latest available version (at least 7.9.1)." + "base64": false, + "value": "Update the WordPress LiteSpeed Cache plugin to the latest available version (at least 7.9.1)." } - ], - "value": "Update the WordPress LiteSpeed Cache Plugin to the latest available version (at least 7.9.1)." + ] } ], - "credits": [ - { - "lang": "en", - "type": "finder", - "user": "00000000-0000-4000-9000-000000000000", - "value": "sicksec | Patchstack Bug Bounty Program" - } - ], - "source": { - "discovery": "EXTERNAL" - }, - "x_generator": { - "engine": "Vulnogram 0.2.0" - } + "tags": [ + "x_known-exploited-vulnerability", + "x_open-source" + ] }, "adp": [ { diff --git a/data/delta.json b/data/delta.json index 8a44c89e7e..e1edbe4b6b 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,14 +1,14 @@ { - "fetchTime": "2026-11-14T07:19:10.080Z", + "fetchTime": "2026-11-14T07:43:11.684Z", "numberOfChanges": 1, - "new": [ + "new": [], + "updated": [ { - "cveId": "CVE-2026-129181", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129181", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129181.json", - "dateUpdated": "2026-11-14T07:15:13.436Z" + "cveId": "CVE-2026-84761", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84761", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84761.json", + "dateUpdated": "2026-11-14T07:41:35.639Z" } ], - "updated": [], "error": [] } \ No newline at end of file diff --git a/data/deltaLog.json b/data/deltaLog.json index 57de9abb73..11847a0343 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,18 @@ [ + { + "fetchTime": "2026-11-14T07:43:11.684Z", + "numberOfChanges": 1, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-84761", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84761", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84761.json", + "dateUpdated": "2026-11-14T07:41:35.639Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-14T07:19:10.080Z", "numberOfChanges": 1, @@ -761514,62 +761528,5 @@ ], "updated": [], "error": [] - }, - { - "fetchTime": "2026-10-15T07:31:14.645Z", - "numberOfChanges": 8, - "new": [ - { - "cveId": "CVE-2026-101309", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101309", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101309.json", - "dateUpdated": "2026-10-15T07:17:50.453Z" - }, - { - "cveId": "CVE-2026-101310", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101310", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101310.json", - "dateUpdated": "2026-10-15T07:18:11.464Z" - }, - { - "cveId": "CVE-2026-101311", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101311", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101311.json", - "dateUpdated": "2026-10-15T07:18:18.968Z" - }, - { - "cveId": "CVE-2026-102465", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102465", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102465.json", - "dateUpdated": "2026-10-15T07:27:55.055Z" - }, - { - "cveId": "CVE-2026-102467", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102467", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102467.json", - "dateUpdated": "2026-10-15T07:19:57.248Z" - }, - { - "cveId": "CVE-2026-102475", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102475", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102475.json", - "dateUpdated": "2026-10-15T07:24:09.062Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-108937", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108937", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108937.json", - "dateUpdated": "2026-10-15T07:17:29.222Z" - }, - { - "cveId": "CVE-2026-108938", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108938", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108938.json", - "dateUpdated": "2026-10-15T07:18:17.767Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 87008ced79..43fd2a1acd 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "be79230da5bc1db2b0ae787cda436f2d5f7c2d34", + "upstream_commit": "d08feb04223b8e7005b4056a61aea76e581ef416", "since_year": 2017, "records": 332571, - "synced_at_utc": "2026-11-14T07:26:53.640495+00:00" + "synced_at_utc": "2026-11-14T08:26:48.533141+00:00" }