VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity

CVE sync 2026-11-13T20:34:36Z

Browse Source
This commit is contained in:
Vulnerability Bot committed 2026-11-13 21:34:40 +01:00
1 parent 9be35edb35
commit 8f6feb24ee
100 files changed
+5525 -1142
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

data/2026/0xxx/CVE-2026-0323.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "palo_alto",
"dateReserved": "2025-11-03T20:46:25.117Z",
"datePublished": "2026-11-11T20:03:37.104Z",
"dateUpdated": "2026-11-11T20:03:37.104Z"
"dateUpdated": "2026-11-13T19:35:17.343Z"
},
"containers": {
"cna": {
@@ -220,6 +220,40 @@
"Checkov by Prisma Cloud 3.4.1"
],
"x_cpeGeneratedAt": "2026-11-11T20:03:00.157Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:18:35.371383Z",
"id": "CVE-2026-0323",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:35:17.343Z"
}
}
]
}
}
data/2026/0xxx/CVE-2026-0324.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "palo_alto",
"dateReserved": "2025-11-03T20:46:26.182Z",
"datePublished": "2026-11-11T20:02:33.834Z",
"dateUpdated": "2026-11-11T20:02:33.834Z"
"dateUpdated": "2026-11-13T19:35:32.812Z"
},
"containers": {
"cna": {
@@ -5038,6 +5038,40 @@
"MetaDefender Endpoint Security SDK 4.3.4821"
],
"x_cpeGeneratedAt": "2026-11-11T20:01:51.449Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:28:54.927839Z",
"id": "CVE-2026-0324",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:35:32.812Z"
}
}
]
}
}
data/2026/0xxx/CVE-2026-0325.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "palo_alto",
"dateReserved": "2025-11-03T20:46:27.343Z",
"datePublished": "2026-11-11T19:51:55.386Z",
"dateUpdated": "2026-11-11T19:51:55.386Z"
"dateUpdated": "2026-11-13T19:35:48.821Z"
},
"containers": {
"cna": {
@@ -637,6 +637,40 @@
"PAN-OS 11.1.0"
],
"x_cpeGeneratedAt": "2026-11-11T19:51:00.512Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:17:55.763609Z",
"id": "CVE-2026-0325",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:35:48.821Z"
}
}
]
}
}
data/2026/0xxx/CVE-2026-0326.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "palo_alto",
"dateReserved": "2025-11-03T20:46:28.340Z",
"datePublished": "2026-11-11T19:50:29.708Z",
"dateUpdated": "2026-11-11T19:50:29.708Z"
"dateUpdated": "2026-11-13T19:36:04.393Z"
},
"containers": {
"cna": {
@@ -629,6 +629,40 @@
"PAN-OS 11.1.0"
],
"x_cpeGeneratedAt": "2026-11-11T19:48:58.606Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:14:27.098581Z",
"id": "CVE-2026-0326",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:36:04.393Z"
}
}
]
}
}
data/2026/0xxx/CVE-2026-0327.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "palo_alto",
"dateReserved": "2025-11-03T20:46:29.314Z",
"datePublished": "2026-11-11T19:48:39.698Z",
"dateUpdated": "2026-11-11T19:48:39.698Z"
"dateUpdated": "2026-11-13T19:36:19.815Z"
},
"containers": {
"cna": {
@@ -637,6 +637,40 @@
"PAN-OS 11.1.0"
],
"x_cpeGeneratedAt": "2026-11-11T19:47:33.946Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:14:11.865052Z",
"id": "CVE-2026-0327",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:36:19.815Z"
}
}
]
}
}
data/2026/0xxx/CVE-2026-0328.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "palo_alto",
"dateReserved": "2025-11-03T20:46:30.360Z",
"datePublished": "2026-11-11T19:45:53.014Z",
"dateUpdated": "2026-11-11T19:45:53.014Z"
"dateUpdated": "2026-11-13T19:36:35.318Z"
},
"containers": {
"cna": {
@@ -1294,6 +1294,40 @@
"PAN-OS 10.2.0"
],
"x_cpeGeneratedAt": "2026-11-11T19:44:19.392Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:12:25.210960Z",
"id": "CVE-2026-0328",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:36:35.318Z"
}
}
]
}
}
data/2026/0xxx/CVE-2026-0329.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "palo_alto",
"dateReserved": "2025-11-03T20:46:31.270Z",
"datePublished": "2026-11-11T19:39:54.302Z",
"dateUpdated": "2026-11-11T19:39:54.302Z"
"dateUpdated": "2026-11-13T19:36:51.379Z"
},
"containers": {
"cna": {
@@ -1354,6 +1354,40 @@
"PAN-OS 10.2.0"
],
"x_cpeGeneratedAt": "2026-11-11T19:37:27.565Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:11:27.205393Z",
"id": "CVE-2026-0329",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:36:51.379Z"
}
}
]
}
}
data/2026/0xxx/CVE-2026-0330.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "palo_alto",
"dateReserved": "2025-11-03T20:46:32.162Z",
"datePublished": "2026-11-11T19:37:07.716Z",
"dateUpdated": "2026-11-11T19:37:07.716Z"
"dateUpdated": "2026-11-13T19:37:08.592Z"
},
"containers": {
"cna": {
@@ -1325,6 +1325,40 @@
"PAN-OS 10.2.0"
],
"x_cpeGeneratedAt": "2026-11-11T19:35:55.226Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:11:09.138212Z",
"id": "CVE-2026-0330",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:37:08.592Z"
}
}
]
}
}
data/2026/0xxx/CVE-2026-0331.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "palo_alto",
"dateReserved": "2025-11-03T20:46:33.085Z",
"datePublished": "2026-11-11T19:35:31.346Z",
"dateUpdated": "2026-11-11T19:35:31.346Z"
"dateUpdated": "2026-11-13T19:37:24.081Z"
},
"containers": {
"cna": {
@@ -1393,6 +1393,40 @@
"PAN-OS 10.2.0"
],
"x_cpeGeneratedAt": "2026-11-11T19:34:25.250Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:08:34.822137Z",
"id": "CVE-2026-0331",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:37:24.081Z"
}
}
]
}
}
data/2026/105xxx/CVE-2026-105625.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Zenitel",
"dateReserved": "2026-10-05T16:31:07.433Z",
"datePublished": "2026-11-13T15:39:12.569Z",
"dateUpdated": "2026-11-13T15:39:12.569Z"
"dateUpdated": "2026-11-13T20:04:30.941Z"
},
"containers": {
"cna": {
@@ -125,6 +125,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:52:51.251365Z",
"id": "CVE-2026-105625",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:04:30.941Z"
}
}
]
}
}
data/2026/105xxx/CVE-2026-105671.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Zenitel",
"dateReserved": "2026-10-05T17:24:32.718Z",
"datePublished": "2026-11-13T15:37:28.294Z",
"dateUpdated": "2026-11-13T15:37:28.294Z"
"dateUpdated": "2026-11-13T20:04:47.622Z"
},
"containers": {
"cna": {
@@ -125,6 +125,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:53:08.383290Z",
"id": "CVE-2026-105671",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:04:47.622Z"
}
}
]
}
}
data/2026/112xxx/CVE-2026-112182.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "INCIBE",
"dateReserved": "2026-10-19T09:03:19.676Z",
"datePublished": "2026-11-13T10:11:27.327Z",
"dateUpdated": "2026-11-13T10:11:27.327Z"
"dateUpdated": "2026-11-13T19:33:11.283Z"
},
"containers": {
"cna": {
@@ -148,6 +148,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:29:12.869897Z",
"id": "CVE-2026-112182",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:33:11.283Z"
}
}
]
}
}
data/2026/114xxx/CVE-2026-114032.json
+4 -7
View File
@@ -8,14 +8,14 @@
"assignerShortName": "Illumio",
"dateReserved": "2026-10-20T21:11:53.061Z",
"datePublished": "2026-11-09T21:31:52.776Z",
"dateUpdated": "2026-11-12T17:16:38.649Z"
"dateUpdated": "2026-11-13T20:11:19.483Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "ea070963-4842-4451-bceb-906a17f8dc69",
"shortName": "Illumio",
"dateUpdated": "2026-11-09T21:35:32.985Z"
"dateUpdated": "2026-11-13T20:11:19.483Z"
},
"title": "Local privilege escalation via untrusted OpenSSL configuration",
"problemTypes": [
@@ -45,9 +45,6 @@
{
"vendor": "Illumio",
"product": "Core Ven",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
@@ -62,12 +59,12 @@
"descriptions": [
{
"lang": "en",
"value": "The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with SYSTEM privileges.",
"value": "The OpenSSL library bundled with the Illumio VEN is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with elevated privileges.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with SYSTEM privileges.</p>"
"value": "<p>The OpenSSL library bundled with the Illumio VEN is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with elevated privileges.</p>"
}
]
}
data/2026/114xxx/CVE-2026-114713.json
+3 -3
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mitre",
"dateReserved": "2026-10-22T00:56:41.381Z",
"datePublished": "2026-11-08T02:31:48.387Z",
"dateUpdated": "2026-11-13T19:05:05.443Z"
"dateUpdated": "2026-11-13T19:25:14.456Z"
},
"containers": {
"cna": {
@@ -179,7 +179,7 @@
}
],
"version": "2.0.3",
"timestamp": "2026-11-13T19:02:57.473163Z"
"timestamp": "2026-11-13T19:16:29.356444Z"
}
}
}
@@ -196,7 +196,7 @@
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:05:05.443Z"
"dateUpdated": "2026-11-13T19:25:14.456Z"
}
}
]
data/2026/116xxx/CVE-2026-116615.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Wordfence",
"dateReserved": "2026-10-26T16:58:35.221Z",
"datePublished": "2026-11-13T09:35:12.566Z",
"dateUpdated": "2026-11-13T09:35:12.566Z"
"dateUpdated": "2026-11-13T19:28:37.970Z"
},
"containers": {
"cna": {
@@ -100,6 +100,40 @@
"value": "Disclosed"
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:28:28.486973Z",
"id": "CVE-2026-116615",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:28:37.970Z"
}
}
]
}
}
data/2026/118xxx/CVE-2026-118191.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Wordfence",
"dateReserved": "2026-10-27T18:53:29.970Z",
"datePublished": "2026-11-13T09:35:15.166Z",
"dateUpdated": "2026-11-13T09:35:15.166Z"
"dateUpdated": "2026-11-13T19:33:26.826Z"
},
"containers": {
"cna": {
@@ -103,6 +103,40 @@
"value": "Disclosed"
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:42:14.462646Z",
"id": "CVE-2026-118191",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:33:26.826Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120145.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "PostgreSQL",
"dateReserved": "2026-10-30T22:45:08.383Z",
"datePublished": "2026-11-12T14:15:23.991Z",
"dateUpdated": "2026-11-12T14:15:23.991Z"
"dateUpdated": "2026-11-13T19:35:01.918Z"
},
"containers": {
"cna": {
@@ -106,6 +106,40 @@
"value": "The PostgreSQL project thanks qian zhang for reporting this problem."
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:27:09.508002Z",
"id": "CVE-2026-120145",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:35:01.918Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120147.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "PostgreSQL",
"dateReserved": "2026-10-30T22:45:08.383Z",
"datePublished": "2026-11-12T14:15:25.141Z",
"dateUpdated": "2026-11-12T14:15:25.141Z"
"dateUpdated": "2026-11-13T19:34:46.290Z"
},
"containers": {
"cna": {
@@ -106,6 +106,40 @@
"value": "The PostgreSQL project thanks 안지용 for reporting this problem."
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:23:55.989324Z",
"id": "CVE-2026-120147",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:34:46.290Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120148.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "PostgreSQL",
"dateReserved": "2026-10-30T22:45:08.383Z",
"datePublished": "2026-11-12T14:15:25.724Z",
"dateUpdated": "2026-11-12T14:15:25.724Z"
"dateUpdated": "2026-11-13T19:34:30.825Z"
},
"containers": {
"cna": {
@@ -106,6 +106,40 @@
"value": "The PostgreSQL project thanks Mehmet D. INCE for reporting this problem."
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:25:24.552400Z",
"id": "CVE-2026-120148",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:34:30.825Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120149.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "PostgreSQL",
"dateReserved": "2026-10-30T22:45:08.383Z",
"datePublished": "2026-11-12T14:15:26.749Z",
"dateUpdated": "2026-11-12T14:15:26.749Z"
"dateUpdated": "2026-11-13T19:34:15.234Z"
},
"containers": {
"cna": {
@@ -106,6 +106,40 @@
"value": "The PostgreSQL project thanks Sumedh Pathak and Sven Klemm for reporting this problem."
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:26:15.530714Z",
"id": "CVE-2026-120149",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:34:15.234Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120150.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "PostgreSQL",
"dateReserved": "2026-10-30T22:45:08.383Z",
"datePublished": "2026-11-12T14:15:27.323Z",
"dateUpdated": "2026-11-12T14:15:27.323Z"
"dateUpdated": "2026-11-13T19:33:58.341Z"
},
"containers": {
"cna": {
@@ -106,6 +106,40 @@
"value": "The PostgreSQL project thanks Claude and Ada Logics for reporting this problem."
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:23:26.284264Z",
"id": "CVE-2026-120150",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:33:58.341Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120573.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Wordfence",
"dateReserved": "2026-11-02T16:39:41.029Z",
"datePublished": "2026-11-13T09:35:15.899Z",
"dateUpdated": "2026-11-13T09:35:15.899Z"
"dateUpdated": "2026-11-13T19:29:28.348Z"
},
"containers": {
"cna": {
@@ -97,6 +97,40 @@
"value": "Disclosed"
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:29:19.052645Z",
"id": "CVE-2026-120573",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:29:28.348Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120803.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:09.274Z",
"datePublished": "2026-11-10T20:02:53.682Z",
"dateUpdated": "2026-11-10T20:02:53.682Z"
"dateUpdated": "2026-11-13T19:48:02.366Z"
},
"containers": {
"cna": {
@@ -133,6 +133,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:47:51.198952Z",
"id": "CVE-2026-120803",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:48:02.366Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120808.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:18.449Z",
"datePublished": "2026-11-10T20:07:28.541Z",
"dateUpdated": "2026-11-10T20:07:28.541Z"
"dateUpdated": "2026-11-13T20:11:56.133Z"
},
"containers": {
"cna": {
@@ -145,6 +145,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T20:11:36.901764Z",
"id": "CVE-2026-120808",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:11:56.133Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120809.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:19.524Z",
"datePublished": "2026-11-10T20:08:12.615Z",
"dateUpdated": "2026-11-10T20:08:12.615Z"
"dateUpdated": "2026-11-13T19:42:43.339Z"
},
"containers": {
"cna": {
@@ -139,6 +139,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:42:36.006778Z",
"id": "CVE-2026-120809",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:42:43.339Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120810.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:20.664Z",
"datePublished": "2026-11-10T20:09:17.573Z",
"dateUpdated": "2026-11-10T20:09:17.573Z"
"dateUpdated": "2026-11-13T20:08:03.961Z"
},
"containers": {
"cna": {
@@ -145,6 +145,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T20:07:52.930649Z",
"id": "CVE-2026-120810",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:08:03.961Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120811.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:21.592Z",
"datePublished": "2026-11-10T20:10:09.182Z",
"dateUpdated": "2026-11-10T20:10:09.182Z"
"dateUpdated": "2026-11-13T19:44:19.140Z"
},
"containers": {
"cna": {
@@ -145,6 +145,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:44:09.937567Z",
"id": "CVE-2026-120811",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:44:19.140Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120812.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:23.170Z",
"datePublished": "2026-11-10T20:10:41.422Z",
"dateUpdated": "2026-11-10T20:10:41.422Z"
"dateUpdated": "2026-11-13T20:04:39.633Z"
},
"containers": {
"cna": {
@@ -133,6 +133,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T20:04:30.397709Z",
"id": "CVE-2026-120812",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:04:39.633Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120813.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:24.413Z",
"datePublished": "2026-11-10T20:11:34.938Z",
"dateUpdated": "2026-11-10T20:11:34.938Z"
"dateUpdated": "2026-11-13T20:07:07.735Z"
},
"containers": {
"cna": {
@@ -145,6 +145,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T20:06:26.991075Z",
"id": "CVE-2026-120813",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:07:07.735Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120817.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:33.808Z",
"datePublished": "2026-11-10T20:15:00.337Z",
"dateUpdated": "2026-11-10T20:15:00.337Z"
"dateUpdated": "2026-11-13T20:03:24.209Z"
},
"containers": {
"cna": {
@@ -145,6 +145,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T20:03:11.622809Z",
"id": "CVE-2026-120817",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:03:24.209Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120821.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:38.779Z",
"datePublished": "2026-11-10T20:17:45.700Z",
"dateUpdated": "2026-11-10T20:17:45.700Z"
"dateUpdated": "2026-11-13T19:52:17.130Z"
},
"containers": {
"cna": {
@@ -127,6 +127,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:52:05.867529Z",
"id": "CVE-2026-120821",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:52:17.130Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120824.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:43.398Z",
"datePublished": "2026-11-10T20:20:33.361Z",
"dateUpdated": "2026-11-10T20:20:33.361Z"
"dateUpdated": "2026-11-13T19:50:07.005Z"
},
"containers": {
"cna": {
@@ -145,6 +145,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:49:54.574130Z",
"id": "CVE-2026-120824",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:50:07.005Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120828.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:53.172Z",
"datePublished": "2026-11-10T20:23:01.828Z",
"dateUpdated": "2026-11-10T20:23:01.828Z"
"dateUpdated": "2026-11-13T19:55:16.354Z"
},
"containers": {
"cna": {
@@ -163,6 +163,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:54:59.943351Z",
"id": "CVE-2026-120828",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:55:16.354Z"
}
}
]
}
}
data/2026/121xxx/CVE-2026-121809.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "EEF",
"dateReserved": "2026-11-13T11:19:13.834Z",
"datePublished": "2026-11-13T16:18:37.954Z",
"dateUpdated": "2026-11-13T16:18:37.954Z"
"dateUpdated": "2026-11-13T19:32:40.114Z"
},
"containers": {
"cna": {
@@ -413,6 +413,40 @@
"value": "1. A partial message\n\nA client sends a 5-byte gRPC length prefix that declares more bytes than follow it, and ends the request body with END_STREAM.\n\n2. The reader asks for more\n\nread_stream/1 calls GRPC.Message.get_message/1, which returns false because the declared message is incomplete. read_stream/1 then sets need_more and reads again through Handler.read_body/1.\n\n3. Every read is empty\n\nOnce the body has been read, the handler's async_read_body/2 (and cowboy_req:read_body/2 in older releases) returns an empty chunk at once. The buffer stays the same, the exit clause for an empty finished buffer never matches, and the loop repeats.\n\n4. No timeout ends it\n\nEach iteration is a message round trip between two local processes, not a socket wait, so no I/O timeout applies. Without a grpc-timeout header there is no deadline, and the adapter's idle timeout defaults to :infinity. One scheduler stays at full load until the client closes the connection."
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T17:55:12.226355Z",
"id": "CVE-2026-121809",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:32:40.114Z"
}
}
]
}
}
data/2026/122xxx/CVE-2026-122227.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Wordfence",
"dateReserved": "2026-11-04T20:43:42.608Z",
"datePublished": "2026-11-13T09:35:16.630Z",
"dateUpdated": "2026-11-13T09:35:16.630Z"
"dateUpdated": "2026-11-13T19:29:47.987Z"
},
"containers": {
"cna": {
@@ -106,6 +106,40 @@
"value": "Disclosed"
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:29:38.506765Z",
"id": "CVE-2026-122227",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:29:47.987Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123039.json
+3 -3
View File
@@ -8,7 +8,7 @@
"assignerShortName": "checkpoint",
"dateReserved": "2026-11-05T07:30:18.138Z",
"datePublished": "2026-11-12T14:02:13.665Z",
"dateUpdated": "2026-11-13T19:05:05.592Z"
"dateUpdated": "2026-11-13T19:25:14.608Z"
},
"containers": {
"cna": {
@@ -143,7 +143,7 @@
}
],
"version": "2.0.3",
"timestamp": "2026-11-13T19:03:04.784476Z"
"timestamp": "2026-11-13T19:16:35.345993Z"
}
}
}
@@ -160,7 +160,7 @@
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:05:05.592Z"
"dateUpdated": "2026-11-13T19:25:14.608Z"
}
}
]
data/2026/123xxx/CVE-2026-123177.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "redhat",
"dateReserved": "2026-11-05T16:47:08.999Z",
"datePublished": "2026-11-13T17:28:17.162Z",
"dateUpdated": "2026-11-13T17:28:17.162Z"
"dateUpdated": "2026-11-13T20:02:51.232Z"
},
"containers": {
"cna": {
@@ -122,6 +122,40 @@
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:49:22.064299Z",
"id": "CVE-2026-123177",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:02:51.232Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124013.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-06T18:38:38.543Z",
"datePublished": "2026-11-12T20:02:57.378Z",
"dateUpdated": "2026-11-13T14:36:45.378Z"
"dateUpdated": "2026-11-13T19:23:25.140Z"
},
"containers": {
"cna": {
@@ -172,6 +172,40 @@
"x_generator": {
"engine": "vulncheck"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:22:05.458995Z",
"id": "CVE-2026-124013",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:23:25.140Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124279.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "EEF",
"dateReserved": "2026-11-13T11:18:43.141Z",
"datePublished": "2026-11-13T16:18:56.700Z",
"dateUpdated": "2026-11-13T16:18:56.700Z"
"dateUpdated": "2026-11-13T19:32:24.719Z"
},
"containers": {
"cna": {
@@ -303,6 +303,40 @@
"value": "1. Large reads\n\nasync_read_body/2 asks Cowboy for up to 8,000,000 bytes per read on the streaming path, whatever max_body_size is set to.\n\n2. The limit is checked after the read\n\ntrack_body_bytes/2 adds each returned chunk to a running total and refuses the stream with RESOURCE_EXHAUSTED only once the total exceeds max_body_size. By then the whole chunk is in memory.\n\n3. No check on the length prefix\n\nThe 5-byte gRPC prefix can declare up to 4 GiB. The server does not compare it with any limit before buffering, so a prefix that declares an oversized message does not stop the read.\n\n4. Result\n\nEach client-streaming or bidirectional-streaming call can make the server hold several megabytes more than the configured limit, and the attacker can open many such calls at once. Before 1.0.6 the streaming path had no limit, and GRPC.Server.Adapters.Cowboy.reading_stream/1 buffered the whole body."
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T17:55:00.516542Z",
"id": "CVE-2026-124279",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:32:24.719Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124680.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "apache",
"dateReserved": "2026-11-09T10:24:53.831Z",
"datePublished": "2026-11-13T17:51:28.431Z",
"dateUpdated": "2026-11-13T17:51:28.431Z"
"dateUpdated": "2026-11-13T20:01:48.036Z"
},
"containers": {
"cna": {
@@ -125,6 +125,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.3"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:50:49.573399Z",
"id": "CVE-2026-124680",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:01:48.036Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124719.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "apache",
"dateReserved": "2026-11-09T10:56:03.487Z",
"datePublished": "2026-11-13T17:50:12.030Z",
"dateUpdated": "2026-11-13T17:50:12.030Z"
"dateUpdated": "2026-11-13T20:02:03.486Z"
},
"containers": {
"cna": {
@@ -120,6 +120,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.3"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:50:39.752278Z",
"id": "CVE-2026-124719",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:02:03.486Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124723.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "apache",
"dateReserved": "2026-11-09T11:03:38.294Z",
"datePublished": "2026-11-13T17:49:43.229Z",
"dateUpdated": "2026-11-13T17:49:43.229Z"
"dateUpdated": "2026-11-13T20:02:19.206Z"
},
"containers": {
"cna": {
@@ -135,6 +135,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.3"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:49:56.142889Z",
"id": "CVE-2026-124723",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:02:19.206Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124726.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "apache",
"dateReserved": "2026-11-09T11:18:05.786Z",
"datePublished": "2026-11-13T17:49:21.949Z",
"dateUpdated": "2026-11-13T17:49:21.949Z"
"dateUpdated": "2026-11-13T20:02:35.162Z"
},
"containers": {
"cna": {
@@ -125,6 +125,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.3"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:49:40.828881Z",
"id": "CVE-2026-124726",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:02:35.162Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124758.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "rt-labs",
"dateReserved": "2026-11-09T12:48:59.071Z",
"datePublished": "2026-11-13T13:23:16.149Z",
"dateUpdated": "2026-11-13T13:23:16.149Z"
"dateUpdated": "2026-11-13T20:06:58.026Z"
},
"containers": {
"cna": {
@@ -127,6 +127,40 @@
"source": {
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T20:00:23.928452Z",
"id": "CVE-2026-124758",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:06:58.026Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124760.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "rt-labs",
"dateReserved": "2026-11-09T12:48:59.072Z",
"datePublished": "2026-11-13T13:23:45.251Z",
"dateUpdated": "2026-11-13T13:23:45.251Z"
"dateUpdated": "2026-11-13T20:06:40.166Z"
},
"containers": {
"cna": {
@@ -122,6 +122,40 @@
"source": {
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:55:10.449608Z",
"id": "CVE-2026-124760",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:06:40.166Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124762.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "rt-labs",
"dateReserved": "2026-11-09T12:48:59.072Z",
"datePublished": "2026-11-13T13:24:25.680Z",
"dateUpdated": "2026-11-13T13:24:25.680Z"
"dateUpdated": "2026-11-13T20:06:24.608Z"
},
"containers": {
"cna": {
@@ -141,6 +141,40 @@
]
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:54:55.423925Z",
"id": "CVE-2026-124762",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:06:24.608Z"
}
}
]
}
}
data/2026/125xxx/CVE-2026-125659.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "CERT-In",
"dateReserved": "2026-11-10T08:12:07.047Z",
"datePublished": "2026-11-13T10:17:45.806Z",
"dateUpdated": "2026-11-13T10:17:45.806Z"
"dateUpdated": "2026-11-13T19:32:55.628Z"
},
"containers": {
"cna": {
@@ -234,6 +234,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:29:39.990073Z",
"id": "CVE-2026-125659",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:32:55.628Z"
}
}
]
}
}
data/2026/125xxx/CVE-2026-125948.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Wordfence",
"dateReserved": "2026-11-10T14:27:30.419Z",
"datePublished": "2026-11-13T09:35:14.454Z",
"dateUpdated": "2026-11-13T09:35:14.454Z"
"dateUpdated": "2026-11-13T19:29:06.151Z"
},
"containers": {
"cna": {
@@ -103,6 +103,40 @@
"value": "Disclosed"
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:28:53.797986Z",
"id": "CVE-2026-125948",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:29:06.151Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126207.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-10T20:07:44.958Z",
"datePublished": "2026-11-12T20:53:55.553Z",
"dateUpdated": "2026-11-12T20:53:55.553Z"
"dateUpdated": "2026-11-13T19:43:00.397Z"
},
"containers": {
"cna": {
@@ -110,6 +110,40 @@
"advisory": "GHSA-m3x9-938q-5767",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:42:04.755994Z",
"id": "CVE-2026-126207",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:43:00.397Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126343.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-10T21:12:01.226Z",
"datePublished": "2026-11-12T21:27:05.380Z",
"dateUpdated": "2026-11-12T21:27:05.380Z"
"dateUpdated": "2026-11-13T19:44:35.522Z"
},
"containers": {
"cna": {
@@ -93,6 +93,40 @@
"advisory": "GHSA-qv5m-9pm6-hqp3",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:43:20.061111Z",
"id": "CVE-2026-126343",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:44:35.522Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126347.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-10T21:12:01.227Z",
"datePublished": "2026-11-12T21:52:22.374Z",
"dateUpdated": "2026-11-12T21:52:22.374Z"
"dateUpdated": "2026-11-13T19:45:25.601Z"
},
"containers": {
"cna": {
@@ -86,6 +86,40 @@
"advisory": "GHSA-5cjw-f85j-cv6r",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:44:59.218911Z",
"id": "CVE-2026-126347",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:45:25.601Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126351.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-10T21:12:01.227Z",
"datePublished": "2026-11-12T22:05:39.079Z",
"dateUpdated": "2026-11-12T22:05:39.079Z"
"dateUpdated": "2026-11-13T19:46:17.533Z"
},
"containers": {
"cna": {
@@ -93,6 +93,40 @@
"advisory": "GHSA-qq38-m9mg-xjj5",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:45:49.464052Z",
"id": "CVE-2026-126351",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:46:17.533Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126355.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-10T21:12:01.227Z",
"datePublished": "2026-11-12T22:14:05.768Z",
"dateUpdated": "2026-11-12T22:14:05.768Z"
"dateUpdated": "2026-11-13T19:49:11.068Z"
},
"containers": {
"cna": {
@@ -93,6 +93,40 @@
"advisory": "GHSA-46wx-v44x-9hh2",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:47:57.793738Z",
"id": "CVE-2026-126355",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:49:11.068Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126416.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:34:05.397Z",
"datePublished": "2026-11-13T09:35:36.479Z",
"dateUpdated": "2026-11-13T11:44:59.933Z"
"dateUpdated": "2026-11-13T19:30:40.300Z"
},
"containers": {
"cna": {
@@ -157,6 +157,48 @@
"x_generator": {
"engine": "vulncheck-one-hundred-kay"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-cxjf-fmpw-qc34",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:30:16.907363Z",
"id": "CVE-2026-126416",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:30:40.300Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126420.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:36:07.090Z",
"datePublished": "2026-11-13T09:35:33.766Z",
"dateUpdated": "2026-11-13T09:35:33.766Z"
"dateUpdated": "2026-11-13T19:31:47.429Z"
},
"containers": {
"cna": {
@@ -139,6 +139,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-ppg9-2f9f-chc4",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:31:11.557616Z",
"id": "CVE-2026-126420",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:31:47.429Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126428.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:36:07.090Z",
"datePublished": "2026-11-13T09:35:28.362Z",
"dateUpdated": "2026-11-13T09:35:28.362Z"
"dateUpdated": "2026-11-13T20:11:47.067Z"
},
"containers": {
"cna": {
@@ -139,6 +139,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-r6wm-8m2j-c3q9",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T20:10:53.276565Z",
"id": "CVE-2026-126428",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:11:47.067Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126432.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:37:25.685Z",
"datePublished": "2026-11-13T09:35:25.637Z",
"dateUpdated": "2026-11-13T09:35:25.637Z"
"dateUpdated": "2026-11-13T20:09:55.714Z"
},
"containers": {
"cna": {
@@ -139,6 +139,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-3xjm-656g-cfj5",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T20:09:10.770826Z",
"id": "CVE-2026-126432",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:09:55.714Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126436.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:37:25.685Z",
"datePublished": "2026-11-13T09:35:22.891Z",
"dateUpdated": "2026-11-13T09:35:22.891Z"
"dateUpdated": "2026-11-13T20:08:41.946Z"
},
"containers": {
"cna": {
@@ -146,6 +146,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T20:08:25.304937Z",
"id": "CVE-2026-126436",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:08:41.946Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126440.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:38:36.342Z",
"datePublished": "2026-11-13T09:35:20.175Z",
"dateUpdated": "2026-11-13T09:35:20.175Z"
"dateUpdated": "2026-11-13T19:26:36.961Z"
},
"containers": {
"cna": {
@@ -139,6 +139,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-mmpv-ph5x-x4m3",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:26:15.114794Z",
"id": "CVE-2026-126440",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:26:36.961Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126444.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:38:36.343Z",
"datePublished": "2026-11-13T09:35:17.502Z",
"dateUpdated": "2026-11-13T09:35:17.502Z"
"dateUpdated": "2026-11-13T19:27:26.767Z"
},
"containers": {
"cna": {
@@ -139,6 +139,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-mcr3-5rq6-9vvj",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:27:04.927789Z",
"id": "CVE-2026-126444",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:27:26.767Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126448.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:38:36.343Z",
"datePublished": "2026-11-13T09:35:14.807Z",
"dateUpdated": "2026-11-13T09:35:14.807Z"
"dateUpdated": "2026-11-13T19:28:11.470Z"
},
"containers": {
"cna": {
@@ -139,6 +139,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-m4cw-vx96-p6fj",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:27:49.565003Z",
"id": "CVE-2026-126448",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:28:11.470Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126452.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:39:26.377Z",
"datePublished": "2026-11-13T09:35:12.032Z",
"dateUpdated": "2026-11-13T09:35:12.032Z"
"dateUpdated": "2026-11-13T19:20:35.384Z"
},
"containers": {
"cna": {
@@ -149,6 +149,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-r65f-fxf6-4fwr",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:20:04.776877Z",
"id": "CVE-2026-126452",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:20:35.384Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126456.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:39:26.377Z",
"datePublished": "2026-11-13T09:35:09.311Z",
"dateUpdated": "2026-11-13T09:35:09.311Z"
"dateUpdated": "2026-11-13T19:21:54.976Z"
},
"containers": {
"cna": {
@@ -139,6 +139,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-ff55-qvf9-2fgm",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:21:31.478827Z",
"id": "CVE-2026-126456",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:21:54.976Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126461.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:41:28.742Z",
"datePublished": "2026-11-13T09:35:06.538Z",
"dateUpdated": "2026-11-13T09:35:06.538Z"
"dateUpdated": "2026-11-13T19:22:59.412Z"
},
"containers": {
"cna": {
@@ -146,6 +146,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-prmv-3m3j-9v7j",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:22:36.639406Z",
"id": "CVE-2026-126461",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:22:59.412Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126465.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:41:28.743Z",
"datePublished": "2026-11-13T09:35:03.882Z",
"dateUpdated": "2026-11-13T09:35:03.882Z"
"dateUpdated": "2026-11-13T19:25:49.018Z"
},
"containers": {
"cna": {
@@ -146,6 +146,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-vvj8-xpx8-p293",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:25:25.636004Z",
"id": "CVE-2026-126465",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:25:49.018Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126469.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:41:28.743Z",
"datePublished": "2026-11-13T09:35:01.156Z",
"dateUpdated": "2026-11-13T09:35:01.156Z"
"dateUpdated": "2026-11-13T19:25:04.022Z"
},
"containers": {
"cna": {
@@ -151,6 +151,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-3h5w-672p-v4m9",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:24:38.755590Z",
"id": "CVE-2026-126469",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:25:04.022Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126493.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:45:21.806Z",
"datePublished": "2026-11-13T09:34:42.519Z",
"dateUpdated": "2026-11-13T09:34:42.519Z"
"dateUpdated": "2026-11-13T19:24:15.882Z"
},
"containers": {
"cna": {
@@ -139,6 +139,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-r4hm-frcj-qr39",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:23:48.314092Z",
"id": "CVE-2026-126493",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:24:15.882Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127122.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "rt-labs",
"dateReserved": "2026-11-12T15:30:49.638Z",
"datePublished": "2026-11-13T13:24:43.878Z",
"dateUpdated": "2026-11-13T13:24:43.878Z"
"dateUpdated": "2026-11-13T20:06:09.052Z"
},
"containers": {
"cna": {
@@ -128,6 +128,40 @@
]
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:54:47.653840Z",
"id": "CVE-2026-127122",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:06:09.052Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127123.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "rt-labs",
"dateReserved": "2026-11-12T15:30:49.638Z",
"datePublished": "2026-11-13T13:25:10.082Z",
"dateUpdated": "2026-11-13T13:25:10.082Z"
"dateUpdated": "2026-11-13T20:05:51.174Z"
},
"containers": {
"cna": {
@@ -115,6 +115,40 @@
"source": {
"discovery": "INTERNAL"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:54:37.258405Z",
"id": "CVE-2026-127123",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:05:51.174Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127124.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "rt-labs",
"dateReserved": "2026-11-12T15:30:49.638Z",
"datePublished": "2026-11-13T13:25:33.021Z",
"dateUpdated": "2026-11-13T13:25:33.021Z"
"dateUpdated": "2026-11-13T20:05:34.500Z"
},
"containers": {
"cna": {
@@ -115,6 +115,40 @@
"source": {
"discovery": "INTERNAL"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:54:28.724324Z",
"id": "CVE-2026-127124",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:05:34.500Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127125.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "rt-labs",
"dateReserved": "2026-11-12T15:30:49.638Z",
"datePublished": "2026-11-13T13:25:53.422Z",
"dateUpdated": "2026-11-13T13:25:53.422Z"
"dateUpdated": "2026-11-13T20:05:18.831Z"
},
"containers": {
"cna": {
@@ -115,6 +115,40 @@
"source": {
"discovery": "INTERNAL"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:54:16.410595Z",
"id": "CVE-2026-127125",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:05:18.831Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127207.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T16:30:10.903Z",
"datePublished": "2026-11-12T20:48:13.864Z",
"dateUpdated": "2026-11-12T20:48:13.864Z"
"dateUpdated": "2026-11-13T19:26:11.976Z"
},
"containers": {
"cna": {
@@ -147,6 +147,40 @@
"x_generator": {
"engine": "vulncheck"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:25:41.067313Z",
"id": "CVE-2026-127207",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:26:11.976Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127214.json
+148
View File
@@ -0,0 +1,148 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-127214",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "PUBLISHED",
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T16:30:10.903Z",
"datePublished": "2026-11-13T19:27:24.723Z",
"dateUpdated": "2026-11-13T19:27:24.723Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-13T19:27:24.723Z"
},
"title": "Flowise 3.1.4 SSRF Bypass via Custom Function Sandbox",
"descriptions": [
{
"lang": "en",
"value": "Flowise through 3.1.4 contains a server-side request forgery vulnerability that allows authenticated attackers with chatflows or agentflows create/update permissions to bypass the Custom Function sandbox's SSRF protection by requiring a module subpath inside an allowlisted package, such as axios/dist/node/axios.cjs or node-fetch/lib/index.js, which evades the vm2 mock table and returns an unwrapped HTTP client that skips the checkDenyList validation. Attackers can issue arbitrary GET and POST requests with attacker-controlled bodies via POST /api/v1/node-custom-function to reach loopback and internal-network addresses or the cloud metadata endpoint, enabling network mapping, credential disclosure, and state changes on internal services."
}
],
"tags": [
"unsupported-when-assigned",
"x_open-source"
],
"datePublic": "2026-11-10T00:00:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Server-Side Request Forgery (SSRF)",
"cweId": "CWE-918",
"type": "CWE"
}
]
}
],
"affected": [
{
"defaultStatus": "unaffected",
"vendor": "FlowiseAI",
"product": "Flowise",
"packageURL": "pkg:github/FlowiseAI/Flowise",
"repo": "https://github.com/FlowiseAI/Flowise",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "3.1.4"
}
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"subIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"version": "4.0",
"baseSeverity": "MEDIUM",
"baseScore": 6.3,
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N"
}
},
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"version": "3.1",
"baseSeverity": "HIGH",
"baseScore": 8.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N"
}
}
],
"references": [
{
"url": "https://github.com/soovwv/cve/blob/main/research/flowise-ssrf-bypass-via-subpath-import.md",
"name": "Researcher Disclosure",
"tags": [
"technical-description",
"exploit"
]
},
{
"url": "https://www.vulncheck.com/advisories/flowise-ssrf-bypass-via-custom-function-sandbox",
"name": "VulnCheck Advisory: Flowise 3.1.4 SSRF Bypass via Custom Function Sandbox",
"tags": [
"third-party-advisory"
]
}
],
"credits": [
{
"lang": "en",
"value": "soovwv",
"type": "finder"
}
],
"x_generator": {
"engine": "vulncheck"
}
}
}
}
data/2026/127xxx/CVE-2026-127215.json
+145
View File
@@ -0,0 +1,145 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-127215",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "PUBLISHED",
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T16:30:10.903Z",
"datePublished": "2026-11-13T20:10:05.135Z",
"dateUpdated": "2026-11-13T20:10:05.135Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-13T20:10:05.135Z"
},
"title": "Kanbanz WordPress Plugin < 1.0.3 Broken Access Control via admin-ajax Handlers",
"descriptions": [
{
"lang": "en",
"value": "Kanbanz by Softaculous plugin for WordPress before 1.0.3 contains a broken access control vulnerability that allows authenticated Kanban Staff users to access and modify boards they are not members of by exploiting admin-ajax handlers that fail to call kanbanz_user_can_access_board() or per-task edit checks on attacker-supplied board_id or task_id parameters. Attackers can supply arbitrary board IDs to read sensitive task data, overwrite status columns, subtasks, and labels, inject comments, upload or delete attachments, and create tasks or set WIP limits on boards owned by other teams."
}
],
"tags": [
"x_open-source"
],
"datePublic": "2026-11-13T00:00:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Authorization Bypass Through User-Controlled Key",
"cweId": "CWE-639",
"type": "CWE"
}
]
}
],
"affected": [
{
"defaultStatus": "unaffected",
"vendor": "Softaculous",
"product": "Kanbanz",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThan": "1.0.3"
}
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"subIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"version": "4.0",
"baseSeverity": "HIGH",
"baseScore": 8.6,
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
}
},
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"version": "3.1",
"baseSeverity": "HIGH",
"baseScore": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
}
}
],
"references": [
{
"url": "https://wordpress.org/plugins/kanbanz/#developers",
"name": "WordPress Plugin",
"tags": [
"release-notes",
"patch"
]
},
{
"url": "https://www.vulncheck.com/advisories/kanbanz-wordpress-plugin-broken-access-control-via-admin-ajax-handlers",
"name": "VulnCheck Advisory: Kanbanz WordPress Plugin < 1.0.3 Broken Access Control via admin-ajax Handlers",
"tags": [
"third-party-advisory"
]
}
],
"credits": [
{
"lang": "en",
"value": "buiih",
"type": "reporter"
}
],
"x_generator": {
"engine": "vulncheck"
}
}
}
}
data/2026/128xxx/CVE-2026-128089.json
+115
View File
@@ -0,0 +1,115 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128089",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T21:24:51.131Z",
"datePublished": "2026-11-13T19:22:22.444Z",
"dateUpdated": "2026-11-13T19:22:22.444Z"
},
"containers": {
"cna": {
"title": "dnspython excessive memory and CPU use",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"lang": "en",
"description": "CWE-400: Uncontrolled Resource Consumption",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-770",
"lang": "en",
"description": "CWE-770: Allocation of Resources Without Limits or Throttling",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/rthalley/dnspython/security/advisories/GHSA-vvf4-9x63-8xvv",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/rthalley/dnspython/security/advisories/GHSA-vvf4-9x63-8xvv"
},
{
"name": "https://github.com/rthalley/dnspython/commit/388db14ee9923288f6e73f86e482c77706e59d73",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/rthalley/dnspython/commit/388db14ee9923288f6e73f86e482c77706e59d73"
},
{
"name": "https://github.com/rthalley/dnspython/commit/a62e1be066da0ed71b5b59f37435bb17cfa0070f",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/rthalley/dnspython/commit/a62e1be066da0ed71b5b59f37435bb17cfa0070f"
},
{
"name": "https://github.com/rthalley/dnspython/releases/tag/v2.9.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/rthalley/dnspython/releases/tag/v2.9.2"
}
],
"affected": [
{
"vendor": "rthalley",
"product": "dnspython",
"versions": [
{
"version": "< 2.9.2",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:22:22.444Z"
},
"descriptions": [
{
"lang": "en",
"value": "dnspython is a DNS toolkit for Python. Prior to version 2.9.2, the from_text() parser for WKS records does not require the service number to be between 0 and 65535 before using it as a bitmap offset. An attacker-controlled zone file can supply a larger number, causing the service bitmap to grow to an extremely large size through inefficient repeated extension, consuming excessive memory and CPU and potentially terminating the process. Applications are affected only when they parse zone-file text whose record type and rdata are attacker controlled. This issue is fixed in version 2.9.2."
}
],
"source": {
"advisory": "GHSA-vvf4-9x63-8xvv",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128100.json
+157
View File
@@ -0,0 +1,157 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128100",
"assignerOrgId": "67fedba0-ff2e-4543-ba5b-aa93e87718cc",
"state": "PUBLISHED",
"assignerShortName": "HashiCorp",
"dateReserved": "2026-11-12T22:16:53.115Z",
"datePublished": "2026-11-13T20:10:09.065Z",
"dateUpdated": "2026-11-13T20:10:09.065Z"
},
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"64 bit",
"32 bit",
"x86",
"ARM",
"MacOS",
"Windows",
"Linux"
],
"product": "Vault",
"repo": "https://github.com/hashicorp/vault",
"vendor": "HashiCorp",
"versions": [
{
"lessThan": "2.2.2",
"status": "affected",
"version": "0.10.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"64 bit",
"32 bit",
"x86",
"ARM",
"MacOS",
"Windows",
"Linux"
],
"product": "Vault Enterprise",
"repo": "https://github.com/hashicorp/vault",
"vendor": "HashiCorp",
"versions": [
{
"changes": [
{
"at": "1.19.25",
"status": "unaffected"
},
{
"at": "1.20.0",
"status": "affected"
},
{
"at": "1.21.14",
"status": "unaffected"
},
{
"at": "2.0.0",
"status": "affected"
}
],
"lessThan": "2.2.2",
"status": "affected",
"version": "0.10.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "This issue was reported to HashiCorp by Chase Bevan-Thomas."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "<p>Vault Community Edition and Vault Enterprise did not apply explicit ACL policy deny rules to letter case variants of user and group names in auth methods that treat these names as case-insensitive. This may allow an authenticated user with delegated permissions to modify a protected user or group, potentially leading to privilege escalation. This vulnerability (CVE-2026-128100) is fixed in Vault Community Edition 2.2.2 and Vault Enterprise 2.2.2, 1.21.14, and 1.19.25.</p><br/>"
}
],
"value": "Vault Community Edition and Vault Enterprise did not apply explicit ACL policy deny rules to letter case variants of user and group names in auth methods that treat these names as case-insensitive. This may allow an authenticated user with delegated permissions to modify a protected user or group, potentially leading to privilege escalation. This vulnerability (CVE-2026-128100) is fixed in Vault Community Edition 2.2.2 and Vault Enterprise 2.2.2, 1.21.14, and 1.19.25."
}
],
"impacts": [
{
"capecId": "CAPEC-1",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-1: Accessing Functionality Not Properly Constrained by ACLs"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-178",
"description": "CWE-178: Improper Handling of Case Sensitivity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "67fedba0-ff2e-4543-ba5b-aa93e87718cc",
"shortName": "HashiCorp",
"dateUpdated": "2026-11-13T20:10:09.065Z"
},
"references": [
{
"url": "https://discuss.hashicorp.com/t/hcsec-2026-58-vault-vulnerable-to-acl-deny-bypass-via-case-variant-auth-method-user-and-group-names/78256"
}
],
"source": {
"advisory": "HCSEC-2026-58",
"discovery": "EXTERNAL"
},
"title": "Vault vulnerable to ACL deny bypass via case-variant auth method user and group names"
}
}
}
data/2026/128xxx/CVE-2026-128116.json
+123
View File
@@ -0,0 +1,123 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128116",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T22:42:47.031Z",
"datePublished": "2026-11-13T19:27:04.478Z",
"dateUpdated": "2026-11-13T19:27:04.478Z"
},
"containers": {
"cna": {
"title": "SvelteKit: Protocol-relative module import during server-side route resolution allows cross-origin script execution",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"lang": "en",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/sveltejs/kit/security/advisories/GHSA-rqp5-r3wg-vg35",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/sveltejs/kit/security/advisories/GHSA-rqp5-r3wg-vg35"
},
{
"name": "https://github.com/sveltejs/kit/pull/17620",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/pull/17620"
},
{
"name": "https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd"
},
{
"name": "https://github.com/sveltejs/kit/commit/a8f7c1e09f13524d3b71d814bad9c15c9f33ef49",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/a8f7c1e09f13524d3b71d814bad9c15c9f33ef49"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.70.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.70.4"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1"
}
],
"affected": [
{
"vendor": "sveltejs",
"product": "kit",
"versions": [
{
"version": "< 2.70.4",
"status": "affected"
},
{
"version": ">= 3.0.0, < 3.1.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:27:04.478Z"
},
"descriptions": [
{
"lang": "en",
"value": "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to versions 2.70.4 and 3.1.1, apps configured with router.resolution: 'server' could treat a pathname beginning with // as a protocol-relative module specifier during client-side navigation. A socially engineered link could therefore make server-side route resolution import and execute JavaScript from another origin in the user's browser. This issue is fixed in 2.70.4 and 3.1.1."
}
],
"source": {
"advisory": "GHSA-rqp5-r3wg-vg35",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128117.json
+123
View File
@@ -0,0 +1,123 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128117",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T22:42:47.031Z",
"datePublished": "2026-11-13T19:29:04.744Z",
"dateUpdated": "2026-11-13T19:29:04.744Z"
},
"containers": {
"cna": {
"title": "SvelteKit: Unhandled URIError when `reroute` rewrites a malformed pathname crashes adapter-node",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-248",
"lang": "en",
"description": "CWE-248: Uncaught Exception",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/sveltejs/kit/security/advisories/GHSA-mw6w-2fmv-pvw3",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/sveltejs/kit/security/advisories/GHSA-mw6w-2fmv-pvw3"
},
{
"name": "https://github.com/sveltejs/kit/pull/17620",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/pull/17620"
},
{
"name": "https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd"
},
{
"name": "https://github.com/sveltejs/kit/commit/7993d5ebab017cb1be898a0b1c57371c5da06557",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/7993d5ebab017cb1be898a0b1c57371c5da06557"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.70.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.70.4"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1"
}
],
"affected": [
{
"vendor": "sveltejs",
"product": "kit",
"versions": [
{
"version": "< 2.70.4",
"status": "affected"
},
{
"version": ">= 3.0.0, < 3.1.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:29:04.744Z"
},
"descriptions": [
{
"lang": "en",
"value": "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to versions 2.70.4 and 3.1.1, the reroute hook could rewrite an invalid percent-encoded pathname into a valid route and reach a comparison that decoded the original malformed pathname outside the guarded decoding operation. The resulting unhandled URIError could crash an adapter-node server and deny service to other requests. This issue is fixed in 2.70.4 and 3.1.1."
}
],
"source": {
"advisory": "GHSA-mw6w-2fmv-pvw3",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128118.json
+108
View File
@@ -0,0 +1,108 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128118",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T22:42:47.031Z",
"datePublished": "2026-11-13T19:31:04.678Z",
"dateUpdated": "2026-11-13T19:31:04.678Z"
},
"containers": {
"cna": {
"title": "SvelteKit: Build-time server-only module import guard could fail, resulting in server secrets being statically replaced in client bundle",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"lang": "en",
"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-668",
"lang": "en",
"description": "CWE-668: Exposure of Resource to Wrong Sphere",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/sveltejs/kit/security/advisories/GHSA-m9j8-jcmv-hp69",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/sveltejs/kit/security/advisories/GHSA-m9j8-jcmv-hp69"
},
{
"name": "https://github.com/sveltejs/kit/commit/ae07803806f75b8b5662ae4ab92934ca1356fd84",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/ae07803806f75b8b5662ae4ab92934ca1356fd84"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1"
}
],
"affected": [
{
"vendor": "sveltejs",
"product": "kit",
"versions": [
{
"version": ">= 3.0.0, < 3.1.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:31:04.678Z"
},
"descriptions": [
{
"lang": "en",
"value": "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From version 3.0.0 until 3.1.1, the build-time server-only module guard did not treat src/params.js as a client entry point even though parameter matchers can run in the browser. Server-only modules imported through src/params.js could consequently enter the client bundle, where statically replaced private environment values or other server secrets could be exposed. This issue is fixed in 3.1.1."
}
],
"source": {
"advisory": "GHSA-m9j8-jcmv-hp69",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128119.json
+98
View File
@@ -0,0 +1,98 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128119",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T22:42:47.031Z",
"datePublished": "2026-11-13T19:32:58.899Z",
"dateUpdated": "2026-11-13T19:32:58.899Z"
},
"containers": {
"cna": {
"title": "SvelteKit: Private `query.batch` functions could collide, producing unexpected parameter / function combinations",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"lang": "en",
"description": "CWE-863: Incorrect Authorization",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/sveltejs/kit/security/advisories/GHSA-6cf5-gc4q-fm3x",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/sveltejs/kit/security/advisories/GHSA-6cf5-gc4q-fm3x"
},
{
"name": "https://github.com/sveltejs/kit/commit/2c190febe78a15cac21be539ed9e99dc2d414b60",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/2c190febe78a15cac21be539ed9e99dc2d414b60"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1"
}
],
"affected": [
{
"vendor": "sveltejs",
"product": "kit",
"versions": [
{
"version": ">= 2.60.1, < 3.1.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:32:58.899Z"
},
"descriptions": [
{
"lang": "en",
"value": "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From version 2.60.1 until 3.1.1, applications using the experimental remote functions flag could assign the same generated identifier to separate non-exported query.batch functions. When those private functions shared a request batch, arguments intended for one function could be passed to another function, causing unexpected cross-function processing and possible disclosure of function arguments. This issue is fixed in 3.1.1."
}
],
"source": {
"advisory": "GHSA-6cf5-gc4q-fm3x",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128120.json
+98
View File
@@ -0,0 +1,98 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128120",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T22:42:47.031Z",
"datePublished": "2026-11-13T19:34:08.320Z",
"dateUpdated": "2026-11-13T19:34:08.320Z"
},
"containers": {
"cna": {
"title": "SvelteKit: DoS while parsing form data from a remote functions `form`",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-407",
"lang": "en",
"description": "CWE-407: Inefficient Algorithmic Complexity",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/sveltejs/kit/security/advisories/GHSA-3r8g-jcqq-3p5j",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/sveltejs/kit/security/advisories/GHSA-3r8g-jcqq-3p5j"
},
{
"name": "https://github.com/sveltejs/kit/commit/24d8ee409d83c438330ff2850b4f159c1222aa27",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/24d8ee409d83c438330ff2850b4f159c1222aa27"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1"
}
],
"affected": [
{
"vendor": "sveltejs",
"product": "kit",
"versions": [
{
"version": ">= 2.42.0, < 3.1.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:34:08.320Z"
},
"descriptions": [
{
"lang": "en",
"value": "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From version 2.42.0 until 3.1.1, applications using the experimental remote functions flag and a remote form function could perform quadratic synchronous work while parsing a specially crafted request with many form entries. The parsing work could block the event loop for an extended period and deny service. This issue is fixed in 3.1.1."
}
],
"source": {
"advisory": "GHSA-3r8g-jcqq-3p5j",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128121.json
+175
View File
@@ -0,0 +1,175 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128121",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T22:42:47.031Z",
"datePublished": "2026-11-13T19:44:19.075Z",
"dateUpdated": "2026-11-13T19:44:19.075Z"
},
"containers": {
"cna": {
"title": "SvelteKit: Prerendered paths are interpreted as regular expressions in Vercel route config generated by @sveltejs/adapter-vercel and @sveltejs/adapter-static",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-116",
"lang": "en",
"description": "CWE-116: Improper Encoding or Escaping of Output",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-625",
"lang": "en",
"description": "CWE-625: Permissive Regular Expression",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/sveltejs/kit/security/advisories/GHSA-jf9x-2fg2-hx4w",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/sveltejs/kit/security/advisories/GHSA-jf9x-2fg2-hx4w"
},
{
"name": "https://github.com/sveltejs/kit/pull/17620",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/pull/17620"
},
{
"name": "https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd"
},
{
"name": "https://github.com/sveltejs/kit/commit/2ed61a6aa3ac230b89e3528654c587847d1525a0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/2ed61a6aa3ac230b89e3528654c587847d1525a0"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-static@3.0.11",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-static@3.0.11"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-static@4.0.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-static@4.0.1"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-vercel@6.3.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-vercel@6.3.5"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-vercel@7.0.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-vercel@7.0.2"
}
],
"affected": [
{
"vendor": "sveltejs",
"product": "kit",
"versions": [
{
"version": "< 2.70.4",
"status": "affected"
},
{
"version": ">= 3.0.0-next.0, < 3.1.1",
"status": "affected"
}
]
},
{
"vendor": "@sveltejs",
"product": "adapter-vercel",
"versions": [
{
"version": "< 6.3.5",
"status": "affected"
},
{
"version": ">= 7.0.0-next.0, < 7.0.2",
"status": "affected"
}
]
},
{
"vendor": "@sveltejs",
"product": "adapter-static",
"versions": [
{
"version": "< 3.0.11",
"status": "affected"
},
{
"version": ">= 4.0.0-next.0, < 4.0.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:44:19.075Z"
},
"descriptions": [
{
"lang": "en",
"value": "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to @sveltejs/adapter-vercel 6.3.5 and 7.0.2 and @sveltejs/adapter-static 3.0.11 and 4.0.1, an attacker-influenced link crawled during prerendering could be emitted into the generated Vercel routing configuration without escaping regular-expression metacharacters. The configuration could consequently interpret the path as regular-expression syntax, match unintended application paths, and expose content or behavior outside the intended path. This issue is fixed in @sveltejs/adapter-vercel 6.3.5 and 7.0.2 and @sveltejs/adapter-static 3.0.11 and 4.0.1."
}
],
"source": {
"advisory": "GHSA-jf9x-2fg2-hx4w",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128122.json
+143
View File
@@ -0,0 +1,143 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128122",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T22:42:47.031Z",
"datePublished": "2026-11-13T19:47:28.720Z",
"dateUpdated": "2026-11-13T19:47:28.720Z"
},
"containers": {
"cna": {
"title": "SvelteKit: Prerendered redirect paths can inject arbitrary rules into the `_redirects` file generated by `@sveltejs/adapter-cloudflare`",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"lang": "en",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-93",
"lang": "en",
"description": "CWE-93: Improper Neutralization of CRLF Sequences",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-116",
"lang": "en",
"description": "CWE-116: Improper Encoding or Escaping of Output",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/sveltejs/kit/security/advisories/GHSA-5wg4-q3ww-283h",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/sveltejs/kit/security/advisories/GHSA-5wg4-q3ww-283h"
},
{
"name": "https://github.com/sveltejs/kit/pull/17620",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/pull/17620"
},
{
"name": "https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd"
},
{
"name": "https://github.com/sveltejs/kit/commit/679e0d84ea9951bb4f1e458a599066b5a451b08a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/679e0d84ea9951bb4f1e458a599066b5a451b08a"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-cloudflare@7.2.10",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-cloudflare@7.2.10"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-cloudflare@8.0.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-cloudflare@8.0.2"
}
],
"affected": [
{
"vendor": "sveltejs",
"product": "kit",
"versions": [
{
"version": ">= 4.7.0, < 7.2.10",
"status": "affected"
},
{
"version": ">= 8.0.0-next.0, < 8.0.2",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:47:28.720Z"
},
"descriptions": [
{
"lang": "en",
"value": "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From version 4.7.0 until versions 7.2.10 and 8.0.2, @sveltejs/adapter-cloudflare allowed an attacker-influenced link crawled during prerendering to place whitespace, control characters, wildcards, or placeholders into a prerendered redirect path. The adapter wrote those paths into the Cloudflare _redirects output without output-context validation, allowing a path to create unintended routing rules that could redirect or expose requests beyond the intended prerendered route. This issue is fixed in 7.2.10 and 8.0.2."
}
],
"source": {
"advisory": "GHSA-5wg4-q3ww-283h",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128123.json
+137
View File
@@ -0,0 +1,137 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128123",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T22:42:47.031Z",
"datePublished": "2026-11-13T19:54:05.381Z",
"dateUpdated": "2026-11-13T19:54:05.381Z"
},
"containers": {
"cna": {
"title": "SvelteKit: `@sveltejs/adapter-node` crashes when proxying certain requests via `fetch`",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-248",
"lang": "en",
"description": "CWE-248: Uncaught Exception",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/sveltejs/kit/security/advisories/GHSA-rqw3-x7hx-mm3p",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/sveltejs/kit/security/advisories/GHSA-rqw3-x7hx-mm3p"
},
{
"name": "https://github.com/sveltejs/kit/pull/17620",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/pull/17620"
},
{
"name": "https://github.com/sveltejs/kit/commit/04756a1f7a4f73e34f1934895340a46de84fc164",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/04756a1f7a4f73e34f1934895340a46de84fc164"
},
{
"name": "https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-node@5.5.8",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-node@5.5.8"
},
{
"name": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-node@6.0.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-node@6.0.1"
}
],
"affected": [
{
"vendor": "sveltejs",
"product": "kit",
"versions": [
{
"version": ">= 3.0.0-next.0, < 3.1.1",
"status": "affected"
},
{
"version": "< 2.70.4",
"status": "affected"
}
]
},
{
"vendor": "@sveltejs",
"product": "adapter-node",
"versions": [
{
"version": ">= 5.5.7, < 5.5.8",
"status": "affected"
},
{
"version": ">= 6.0.0-next.0, < 6.0.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:54:05.381Z"
},
"descriptions": [
{
"lang": "en",
"value": "SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From version 5.5.7 until versions 5.5.8 and 6.0.1, , @sveltejs/adapter-node can attempt to add a header to an immutable request in a context that causes the server to crash, denying service to any other requests routed to that server. This issue is fixed in 5.5.8 and 6.0.1."
}
],
"source": {
"advisory": "GHSA-rqw3-x7hx-mm3p",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128970.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "esaqa",
"dateReserved": "2026-11-13T13:45:01.621Z",
"datePublished": "2026-11-13T14:25:45.811Z",
"dateUpdated": "2026-11-13T14:25:45.811Z"
"dateUpdated": "2026-11-13T20:05:03.262Z"
},
"containers": {
"cna": {
@@ -229,6 +229,40 @@
"x_internal": {
"note": "The organization/user UUIDs are placeholders. The PUBLISHED state selects the full-record schema and does not indicate actual publication. Replace placeholders and remove this internal note before submission. Version 7.5.1 was released for both Community Edition and Enterprise Edition on 2026-10-13 and includes fix commit 86e7ce7fdbb04fc4ae3430cc434179630948d48d, verified in both local repositories. The first Community Edition release containing the invite-only deletion authorization path is 1.12.6; release 1.12.5 still required independent grant rights on the share. Enterprise Edition is closed source; no Enterprise Edition source repository links are included. Its version lower bound of 0 denotes releases before the fixed boundary rather than an independently established introduction version."
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:53:45.836995Z",
"id": "CVE-2026-128970",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:05:03.262Z"
}
}
]
}
}
data/2026/47xxx/CVE-2026-47710.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-05-19T21:29:25.481Z",
"datePublished": "2026-11-12T20:02:30.409Z",
"dateUpdated": "2026-11-12T20:02:30.409Z"
"dateUpdated": "2026-11-13T19:21:39.293Z"
},
"containers": {
"cna": {
@@ -104,6 +104,48 @@
"advisory": "GHSA-2xm5-gjpc-9m6q",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-2xm5-gjpc-9m6q",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:20:58.473668Z",
"id": "CVE-2026-47710",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:21:39.293Z"
}
}
]
}
}
data/2026/59xxx/CVE-2026-59081.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "CERT-PL",
"dateReserved": "2026-07-02T08:57:58.309Z",
"datePublished": "2026-11-13T07:29:04.031Z",
"dateUpdated": "2026-11-13T07:29:04.031Z"
"dateUpdated": "2026-11-13T19:33:42.847Z"
},
"containers": {
"cna": {
@@ -125,6 +125,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.3"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:28:41.220251Z",
"id": "CVE-2026-59081",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:33:42.847Z"
}
}
]
}
}
data/2026/68xxx/CVE-2026-68905.json
+84
View File
@@ -0,0 +1,84 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-68905",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-31T21:04:04.040Z",
"datePublished": "2026-11-13T19:21:26.887Z",
"dateUpdated": "2026-11-13T19:21:26.887Z"
},
"containers": {
"cna": {
"title": "Hugo Blog: Unauthenticated AI Proxy Allows Abuse of Server-Side API Key",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"lang": "en",
"description": "CWE-306: Missing Authentication for Critical Functionality",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/lanshi17/hugo_blog/security/advisories/GHSA-pj75-r769-qjv2",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/lanshi17/hugo_blog/security/advisories/GHSA-pj75-r769-qjv2"
}
],
"affected": [
{
"vendor": "lanshi17",
"product": "hugo_blog",
"versions": [
{
"version": "<= 744ca1563032e8a881390d3ed55d9a3ef2928502",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:21:26.887Z"
},
"descriptions": [
{
"lang": "en",
"value": "Hugo Blog is a tech blog site. In commit 744ca15 and prior, the AI assistant proxy exposes three HTTP endpoints (POST /api/blog-assistant, POST /api/blog-search-embedding, POST /api/blog-search-rerank) without any authentication check. When deployed following the documented Nginx reverse-proxy setup, any unauthenticated remote attacker can send arbitrary requests that the proxy forwards to the upstream LLM/embedding/rerank API using the operator's server-side API key (OPENAI_API_KEY / AI_SEARCH_API_KEY). This enables unlimited quota consumption, cost exhaustion, and potential service unavailability for the operator. At time of publication, there are no publicly available patches."
}
],
"source": {
"advisory": "GHSA-pj75-r769-qjv2",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/86xxx/CVE-2026-86322.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "redhat",
"dateReserved": "2026-09-07T06:25:38.505Z",
"datePublished": "2026-11-12T20:19:29.433Z",
"dateUpdated": "2026-11-13T16:56:56.573Z"
"dateUpdated": "2026-11-13T19:25:03.846Z"
},
"containers": {
"cna": {
@@ -246,6 +246,40 @@
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:24:04.760721Z",
"id": "CVE-2026-86322",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:25:03.846Z"
}
}
]
}
}
data/2026/95xxx/CVE-2026-95377.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Zenitel",
"dateReserved": "2026-09-22T05:16:14.448Z",
"datePublished": "2026-11-13T15:47:10.537Z",
"dateUpdated": "2026-11-13T15:47:10.537Z"
"dateUpdated": "2026-11-13T20:03:09.053Z"
},
"containers": {
"cna": {
@@ -252,6 +252,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:51:26.769617Z",
"id": "CVE-2026-95377",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:03:09.053Z"
}
}
]
}
}
data/2026/95xxx/CVE-2026-95378.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Zenitel",
"dateReserved": "2026-09-22T05:16:24.841Z",
"datePublished": "2026-11-13T15:45:14.968Z",
"dateUpdated": "2026-11-13T15:45:14.968Z"
"dateUpdated": "2026-11-13T20:03:58.215Z"
},
"containers": {
"cna": {
@@ -261,6 +261,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:52:26.219395Z",
"id": "CVE-2026-95378",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:03:58.215Z"
}
}
]
}
}
data/2026/95xxx/CVE-2026-95613.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Zenitel",
"dateReserved": "2026-09-22T09:55:19.680Z",
"datePublished": "2026-11-13T15:44:28.709Z",
"dateUpdated": "2026-11-13T15:44:28.709Z"
"dateUpdated": "2026-11-13T20:04:15.272Z"
},
"containers": {
"cna": {
@@ -145,6 +145,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:52:39.915721Z",
"id": "CVE-2026-95613",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:04:15.272Z"
}
}
]
}
}
data/2026/95xxx/CVE-2026-95614.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Zenitel",
"dateReserved": "2026-09-22T09:56:14.237Z",
"datePublished": "2026-11-13T15:46:37.152Z",
"dateUpdated": "2026-11-13T15:46:37.152Z"
"dateUpdated": "2026-11-13T20:03:25.624Z"
},
"containers": {
"cna": {
@@ -135,6 +135,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:51:38.523906Z",
"id": "CVE-2026-95614",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:03:25.624Z"
}
}
]
}
}
data/2026/95xxx/CVE-2026-95615.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Zenitel",
"dateReserved": "2026-09-22T09:56:15.657Z",
"datePublished": "2026-11-13T15:45:56.520Z",
"dateUpdated": "2026-11-13T15:45:56.520Z"
"dateUpdated": "2026-11-13T20:03:42.179Z"
},
"containers": {
"cna": {
@@ -125,6 +125,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:51:50.060942Z",
"id": "CVE-2026-95615",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T20:03:42.179Z"
}
}
]
}
}
data/2026/97xxx/CVE-2026-97357.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "B.Braun",
"dateReserved": "2026-09-24T13:21:38.588Z",
"datePublished": "2026-11-13T17:54:23.896Z",
"dateUpdated": "2026-11-13T17:54:23.896Z"
"dateUpdated": "2026-11-13T19:32:09.161Z"
},
"containers": {
"cna": {
@@ -120,6 +120,40 @@
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:31:52.934925Z",
"id": "CVE-2026-97357",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:32:09.161Z"
}
}
]
}
}
data/2026/97xxx/CVE-2026-97358.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "B.Braun",
"dateReserved": "2026-09-24T13:21:42.792Z",
"datePublished": "2026-11-13T17:55:24.556Z",
"dateUpdated": "2026-11-13T17:55:24.556Z"
"dateUpdated": "2026-11-13T19:31:51.522Z"
},
"containers": {
"cna": {
@@ -120,6 +120,40 @@
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:31:26.488418Z",
"id": "CVE-2026-97358",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:31:51.522Z"
}
}
]
}
}
data/2026/97xxx/CVE-2026-97361.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "B.Braun",
"dateReserved": "2026-09-24T13:33:19.163Z",
"datePublished": "2026-11-13T17:57:12.207Z",
"dateUpdated": "2026-11-13T17:57:12.207Z"
"dateUpdated": "2026-11-13T19:31:35.380Z"
},
"containers": {
"cna": {
@@ -110,6 +110,40 @@
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:29:56.225817Z",
"id": "CVE-2026-97361",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:31:35.380Z"
}
}
]
}
}
data/delta.json
+186 -11
View File
@@ -1,20 +1,195 @@
{
"fetchTime": "2026-11-13T19:19:39.833Z",
"numberOfChanges": 2,
"fetchTime": "2026-11-13T20:13:31.505Z",
"numberOfChanges": 31,
"new": [
{
"cveId": "CVE-2026-127213",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127213",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127213.json",
"dateUpdated": "2026-11-13T19:18:18.761Z"
"cveId": "CVE-2026-127215",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127215",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127215.json",
"dateUpdated": "2026-11-13T20:10:05.135Z"
},
{
"cveId": "CVE-2026-68551",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-68551",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68551.json",
"dateUpdated": "2026-11-13T19:14:35.246Z"
"cveId": "CVE-2026-128100",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128100",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128100.json",
"dateUpdated": "2026-11-13T20:10:09.065Z"
}
],
"updated": [
{
"cveId": "CVE-2026-105625",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105625",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105625.json",
"dateUpdated": "2026-11-13T20:04:30.941Z"
},
{
"cveId": "CVE-2026-105671",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105671",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105671.json",
"dateUpdated": "2026-11-13T20:04:47.622Z"
},
{
"cveId": "CVE-2026-114032",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114032",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114032.json",
"dateUpdated": "2026-11-13T20:11:19.483Z"
},
{
"cveId": "CVE-2026-120808",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120808",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120808.json",
"dateUpdated": "2026-11-13T20:11:56.133Z"
},
{
"cveId": "CVE-2026-120810",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120810",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120810.json",
"dateUpdated": "2026-11-13T20:08:03.961Z"
},
{
"cveId": "CVE-2026-120812",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120812",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120812.json",
"dateUpdated": "2026-11-13T20:04:39.633Z"
},
{
"cveId": "CVE-2026-120813",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120813",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120813.json",
"dateUpdated": "2026-11-13T20:07:07.735Z"
},
{
"cveId": "CVE-2026-120817",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120817",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120817.json",
"dateUpdated": "2026-11-13T20:03:24.209Z"
},
{
"cveId": "CVE-2026-123177",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123177",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123177.json",
"dateUpdated": "2026-11-13T20:02:51.232Z"
},
{
"cveId": "CVE-2026-124680",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124680",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124680.json",
"dateUpdated": "2026-11-13T20:01:48.036Z"
},
{
"cveId": "CVE-2026-124719",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124719",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124719.json",
"dateUpdated": "2026-11-13T20:02:03.486Z"
},
{
"cveId": "CVE-2026-124723",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124723",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124723.json",
"dateUpdated": "2026-11-13T20:02:19.206Z"
},
{
"cveId": "CVE-2026-124726",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124726",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124726.json",
"dateUpdated": "2026-11-13T20:02:35.162Z"
},
{
"cveId": "CVE-2026-124758",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124758",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124758.json",
"dateUpdated": "2026-11-13T20:06:58.026Z"
},
{
"cveId": "CVE-2026-124760",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124760",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124760.json",
"dateUpdated": "2026-11-13T20:06:40.166Z"
},
{
"cveId": "CVE-2026-124762",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124762",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124762.json",
"dateUpdated": "2026-11-13T20:06:24.608Z"
},
{
"cveId": "CVE-2026-126428",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126428",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126428.json",
"dateUpdated": "2026-11-13T20:11:47.067Z"
},
{
"cveId": "CVE-2026-126432",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126432",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126432.json",
"dateUpdated": "2026-11-13T20:09:55.714Z"
},
{
"cveId": "CVE-2026-126436",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126436",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126436.json",
"dateUpdated": "2026-11-13T20:08:41.946Z"
},
{
"cveId": "CVE-2026-127122",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127122",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127122.json",
"dateUpdated": "2026-11-13T20:06:09.052Z"
},
{
"cveId": "CVE-2026-127123",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127123",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127123.json",
"dateUpdated": "2026-11-13T20:05:51.174Z"
},
{
"cveId": "CVE-2026-127124",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127124",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127124.json",
"dateUpdated": "2026-11-13T20:05:34.500Z"
},
{
"cveId": "CVE-2026-127125",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127125",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127125.json",
"dateUpdated": "2026-11-13T20:05:18.831Z"
},
{
"cveId": "CVE-2026-128970",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128970",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128970.json",
"dateUpdated": "2026-11-13T20:05:03.262Z"
},
{
"cveId": "CVE-2026-95377",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95377",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95377.json",
"dateUpdated": "2026-11-13T20:03:09.053Z"
},
{
"cveId": "CVE-2026-95378",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95378",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95378.json",
"dateUpdated": "2026-11-13T20:03:58.215Z"
},
{
"cveId": "CVE-2026-95613",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95613",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95613.json",
"dateUpdated": "2026-11-13T20:04:15.272Z"
},
{
"cveId": "CVE-2026-95614",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95614",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95614.json",
"dateUpdated": "2026-11-13T20:03:25.624Z"
},
{
"cveId": "CVE-2026-95615",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95615",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95615.json",
"dateUpdated": "2026-11-13T20:03:42.179Z"
}
],
"updated": [],
"error": []
}
data/deltaLog.json
+644 -953
View File
File diff suppressed because it is too large. Load diff