VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity

CVE sync 2026-11-13T19:32:45Z

Browse Source
This commit is contained in:
Vulnerability Bot committed 2026-11-13 20:32:50 +01:00
1 parent 52e1c2d227
commit 9be35edb35
102 files changed
+6787 -7898
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

data/2026/100xxx/CVE-2026-100403.json
+99
View File
@@ -0,0 +1,99 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-100403",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-09-25T20:08:33.083Z",
"datePublished": "2026-11-13T18:41:06.709Z",
"dateUpdated": "2026-11-13T18:41:06.709Z"
},
"containers": {
"cna": {
"title": "BACnet Stack: BACnet/SC hub grows its WebSocket reassembly buffer without limit, so a peer can exhaust its memory",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"lang": "en",
"description": "CWE-400: Uncontrolled Resource Consumption",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-4vgv-v5ph-rmxr",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-4vgv-v5ph-rmxr"
},
{
"name": "https://github.com/bacnet-stack/bacnet-stack/pull/1433",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/pull/1433"
}
],
"affected": [
{
"vendor": "bacnet-stack",
"product": "bacnet-stack",
"versions": [
{
"version": "< 1.4.6",
"status": "affected"
},
{
"version": ">= 1.5.0, < 1.5.2",
"status": "affected"
},
{
"version": ">= 1.6.0, < 1.6.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:41:06.709Z"
},
"descriptions": [
{
"lang": "en",
"value": "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, the BACnet/SC hub's Linux WebSocket server reassembles fragmented WebSocket messages into a per-connection fragment_buffer. It grows that buffer with realloc() on every non-final frame, with no upper bound. A peer that streams binary continuation fragments and never sets FIN keeps the hub reallocating until the box runs out of memory or the process is OOM-killed. The buffer starts at the maximum legal BVLC-SC NPDU size, but nothing after that ties its growth back to that limit. This issue has been patched in versions 1.4.6, 1.5.2, 1.6.1, and 1.7.0."
}
],
"source": {
"advisory": "GHSA-4vgv-v5ph-rmxr",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/102xxx/CVE-2026-102537.json
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-102537",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-09-29T13:00:21.388Z",
"datePublished": "2026-11-13T18:41:50.301Z",
"dateUpdated": "2026-11-13T18:41:50.301Z"
},
"containers": {
"cna": {
"title": "bacnet-stack BACnet/SC node always accepts a self-signed hub cert, so an attacker can MITM it",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"lang": "en",
"description": "CWE-295: Improper Certificate Validation",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"references": [
{
"name": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-jgm4-2wg9-jwfg",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-jgm4-2wg9-jwfg"
},
{
"name": "https://github.com/bacnet-stack/bacnet-stack/pull/1434",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/pull/1434"
}
],
"affected": [
{
"vendor": "bacnet-stack",
"product": "bacnet-stack",
"versions": [
{
"version": "< 1.4.6",
"status": "affected"
},
{
"version": ">= 1.5.0, < 1.5.2",
"status": "affected"
},
{
"version": ">= 1.6.0, < 1.6.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:41:50.301Z"
},
"descriptions": [
{
"lang": "en",
"value": "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, bws_cli_connect() in ports/linux/websocket-cli.c loads the trusted CA cert into the libwebsockets context, then always sets LCCSCF_ALLOW_SELFSIGNED in the connection flags. So lws accepts any self-signed hub certificate, whether or not it chains to the loaded CA. A BACnet/SC node finishes the TLS handshake to a rogue hub that presents a self-signed cert. It then hands the attacker its identity (VMAC, UUID) and all later BACnet traffic. This issue has been patched in versions 1.4.6, 1.5.2, 1.6.1, and 1.7.0."
}
],
"source": {
"advisory": "GHSA-jgm4-2wg9-jwfg",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/102xxx/CVE-2026-102612.json
+99
View File
@@ -0,0 +1,99 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-102612",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-09-29T14:18:02.921Z",
"datePublished": "2026-11-13T18:43:21.138Z",
"dateUpdated": "2026-11-13T18:43:21.138Z"
},
"containers": {
"cna": {
"title": "BACnet Stack: BACnet/SC hub never requires a client cert, so any host joins the mesh unauthenticated",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"lang": "en",
"description": "CWE-295: Improper Certificate Validation",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-92q2-p4vr-fvmp",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-92q2-p4vr-fvmp"
},
{
"name": "https://github.com/bacnet-stack/bacnet-stack/pull/1436",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/pull/1436"
}
],
"affected": [
{
"vendor": "bacnet-stack",
"product": "bacnet-stack",
"versions": [
{
"version": "< 1.4.6",
"status": "affected"
},
{
"version": ">= 1.5.0, < 1.5.2",
"status": "affected"
},
{
"version": ">= 1.6.0, < 1.6.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:43:21.138Z"
},
"descriptions": [
{
"lang": "en",
"value": "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, bws_srv_start() in ports/linux/websocket-srv.c builds the libwebsockets server context with a CA certificate loaded but never sets LWS_SERVER_OPTION_REQUIRE_VALID_OPENSSL_CLIENT_CERT, so the hub accepts TLS connections from clients presenting no certificate at all. Any network-reachable host can join the BACnet/SC mesh without credentials. This issue has been patched in versions 1.4.6, 1.5.2, 1.6.1, and 1.7.0."
}
],
"source": {
"advisory": "GHSA-92q2-p4vr-fvmp",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/104xxx/CVE-2026-104204.json
+94
View File
@@ -0,0 +1,94 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-104204",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-10-01T18:54:15.120Z",
"datePublished": "2026-11-13T18:44:09.471Z",
"dateUpdated": "2026-11-13T18:44:09.471Z"
},
"containers": {
"cna": {
"title": "BACnet Stack: Structured View subordinate-list[0] WriteProperty allows unbounded synchronous resize and remote unauthenticated DoS",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"lang": "en",
"description": "CWE-770: Allocation of Resources Without Limits or Throttling",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"references": [
{
"name": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-hg85-pmm3-jfcf",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-hg85-pmm3-jfcf"
},
{
"name": "https://github.com/bacnet-stack/bacnet-stack/pull/1437",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/pull/1437"
}
],
"affected": [
{
"vendor": "bacnet-stack",
"product": "bacnet-stack",
"versions": [
{
"version": "< 1.6.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:44:09.471Z"
},
"descriptions": [
{
"lang": "en",
"value": "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.6.1, there is a server-side denial-of-service issue affecting the Structured View object implementation. This issue has been patched in versions 1.6.1 and 1.7.0."
}
],
"source": {
"advisory": "GHSA-hg85-pmm3-jfcf",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/114xxx/CVE-2026-114713.json
+14 -6
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mitre",
"dateReserved": "2026-10-22T00:56:41.381Z",
"datePublished": "2026-11-08T02:31:48.387Z",
"dateUpdated": "2026-11-13T05:03:13.644Z"
"dateUpdated": "2026-11-13T19:05:05.443Z"
},
"containers": {
"cna": {
@@ -165,10 +165,11 @@
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-12T00:00:00+00:00",
"id": "CVE-2026-114713",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
"Exploitation": "active"
},
{
"Automatable": "yes"
@@ -177,18 +178,25 @@
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3",
"id": "CVE-2026-114713"
"timestamp": "2026-11-13T19:02:57.473163Z"
}
}
}
],
"references": [
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-114713",
"tags": [
"government-resource"
]
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T05:03:13.644Z"
"dateUpdated": "2026-11-13T19:05:05.443Z"
}
}
]
data/2026/116xxx/CVE-2026-116059.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-10-24T21:42:41.322Z",
"datePublished": "2026-11-13T06:00:06.766Z",
"dateUpdated": "2026-11-13T06:00:06.766Z"
"dateUpdated": "2026-11-13T18:54:58.925Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-89",
"lang": "en",
"description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 8.6,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:51:14.218024Z",
"id": "CVE-2026-116059",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:54:58.925Z"
}
}
]
}
}
data/2026/118xxx/CVE-2026-118063.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-10-27T15:38:33.514Z",
"datePublished": "2026-11-13T06:00:06.947Z",
"dateUpdated": "2026-11-13T06:00:06.947Z"
"dateUpdated": "2026-11-13T18:46:30.857Z"
},
"containers": {
"cna": {
@@ -73,6 +73,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-434",
"lang": "en",
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:44:14.178860Z",
"id": "CVE-2026-118063",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:46:30.857Z"
}
}
]
}
}
data/2026/118xxx/CVE-2026-118064.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-10-27T15:38:38.123Z",
"datePublished": "2026-11-13T06:00:07.125Z",
"dateUpdated": "2026-11-13T06:00:07.125Z"
"dateUpdated": "2026-11-13T18:46:58.222Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-434",
"lang": "en",
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:44:03.488401Z",
"id": "CVE-2026-118064",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:46:58.222Z"
}
}
]
}
}
data/2026/118xxx/CVE-2026-118065.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-10-27T15:38:42.223Z",
"datePublished": "2026-11-13T06:00:07.303Z",
"dateUpdated": "2026-11-13T06:00:07.303Z"
"dateUpdated": "2026-11-13T18:54:44.431Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-862",
"lang": "en",
"description": "CWE-862 Missing Authorization"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:51:03.375158Z",
"id": "CVE-2026-118065",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:54:44.431Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120407.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-02T10:54:18.398Z",
"datePublished": "2026-11-13T06:00:07.477Z",
"dateUpdated": "2026-11-13T06:00:07.477Z"
"dateUpdated": "2026-11-13T18:54:29.387Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-200",
"lang": "en",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:50:53.094889Z",
"id": "CVE-2026-120407",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:54:29.387Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120805.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:14.893Z",
"datePublished": "2026-11-10T20:04:26.824Z",
"dateUpdated": "2026-11-10T20:04:26.824Z"
"dateUpdated": "2026-11-13T18:52:40.390Z"
},
"containers": {
"cna": {
@@ -145,6 +145,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:52:32.530764Z",
"id": "CVE-2026-120805",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:52:40.390Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120816.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:30.544Z",
"datePublished": "2026-11-10T20:14:15.748Z",
"dateUpdated": "2026-11-10T20:14:15.748Z"
"dateUpdated": "2026-11-13T18:58:21.808Z"
},
"containers": {
"cna": {
@@ -145,6 +145,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:58:11.780535Z",
"id": "CVE-2026-120816",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:58:21.808Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120818.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:35.277Z",
"datePublished": "2026-11-10T20:16:01.719Z",
"dateUpdated": "2026-11-10T20:16:01.719Z"
"dateUpdated": "2026-11-13T19:00:12.313Z"
},
"containers": {
"cna": {
@@ -139,6 +139,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:00:00.812296Z",
"id": "CVE-2026-120818",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:00:12.313Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120820.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:37.535Z",
"datePublished": "2026-11-10T20:16:40.103Z",
"dateUpdated": "2026-11-10T20:16:40.103Z"
"dateUpdated": "2026-11-13T18:49:56.448Z"
},
"containers": {
"cna": {
@@ -139,6 +139,40 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:49:45.590846Z",
"id": "CVE-2026-120820",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:49:56.448Z"
}
}
]
}
}
data/2026/120xxx/CVE-2026-120822.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-02T22:54:40.652Z",
"datePublished": "2026-11-10T20:18:42.815Z",
"dateUpdated": "2026-11-10T20:18:42.815Z"
"dateUpdated": "2026-11-13T18:48:21.832Z"
},
"containers": {
"cna": {
@@ -145,6 +145,48 @@
"x_generator": {
"engine": "cve_record_builder.py"
}
}
},
"adp": [
{
"references": [
{
"url": "https://jira.mongodb.org/browse/SERVER-136182",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:47:16.193032Z",
"id": "CVE-2026-120822",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:48:21.832Z"
}
}
]
}
}
data/2026/121xxx/CVE-2026-121528.json
+3 -3
View File
@@ -8,7 +8,7 @@
"assignerShortName": "fortinet",
"dateReserved": "2026-11-03T14:32:10.363Z",
"datePublished": "2026-11-11T21:31:53.978Z",
"dateUpdated": "2026-11-11T21:31:53.978Z"
"dateUpdated": "2026-11-13T19:03:23.314Z"
},
"containers": {
"cna": {
@@ -122,13 +122,13 @@
"descriptions": [
{
"lang": "en",
"value": "A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.13 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the SSLVPN web portal and the backend destination website."
"value": "A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.13, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the SSLVPN web portal and the backend destination website."
}
],
"providerMetadata": {
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
"shortName": "fortinet",
"dateUpdated": "2026-11-11T21:31:53.978Z"
"dateUpdated": "2026-11-13T19:03:23.314Z"
},
"problemTypes": [
{
data/2026/121xxx/CVE-2026-121853.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-04T09:20:04.668Z",
"datePublished": "2026-11-13T06:00:07.647Z",
"dateUpdated": "2026-11-13T06:00:07.647Z"
"dateUpdated": "2026-11-13T18:54:14.944Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-200",
"lang": "en",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:50:45.453230Z",
"id": "CVE-2026-121853",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:54:14.944Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123039.json
+14 -6
View File
@@ -8,7 +8,7 @@
"assignerShortName": "checkpoint",
"dateReserved": "2026-11-05T07:30:18.138Z",
"datePublished": "2026-11-12T14:02:13.665Z",
"dateUpdated": "2026-11-13T16:27:35.594Z"
"dateUpdated": "2026-11-13T19:05:05.592Z"
},
"containers": {
"cna": {
@@ -129,11 +129,11 @@
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T11:43:47.126754Z",
"id": "CVE-2026-123039",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
"Exploitation": "active"
},
{
"Automatable": "no"
@@ -142,17 +142,25 @@
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
"version": "2.0.3",
"timestamp": "2026-11-13T19:03:04.784476Z"
}
}
}
],
"references": [
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-123039",
"tags": [
"government-resource"
]
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T16:27:35.594Z"
"dateUpdated": "2026-11-13T19:05:05.592Z"
}
}
]
data/2026/123xxx/CVE-2026-123093.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-05T12:04:43.863Z",
"datePublished": "2026-11-13T06:00:07.819Z",
"dateUpdated": "2026-11-13T06:00:07.819Z"
"dateUpdated": "2026-11-13T18:54:00.462Z"
},
"containers": {
"cna": {
@@ -87,6 +87,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-862",
"lang": "en",
"description": "CWE-862 Missing Authorization"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:50:33.378013Z",
"id": "CVE-2026-123093",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:54:00.462Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123097.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-05T12:23:52.121Z",
"datePublished": "2026-11-13T06:00:08.059Z",
"dateUpdated": "2026-11-13T06:00:08.059Z"
"dateUpdated": "2026-11-13T18:53:46.051Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-269",
"lang": "en",
"description": "CWE-269 Improper Privilege Management"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:50:24.696584Z",
"id": "CVE-2026-123097",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:53:46.051Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123124.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-05T13:04:03.458Z",
"datePublished": "2026-11-13T06:00:08.243Z",
"dateUpdated": "2026-11-13T06:00:08.243Z"
"dateUpdated": "2026-11-13T18:53:30.627Z"
},
"containers": {
"cna": {
@@ -88,6 +88,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-79",
"lang": "en",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:49:51.938823Z",
"id": "CVE-2026-123124",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:53:30.627Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123670.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-06T09:33:36.605Z",
"datePublished": "2026-11-13T06:00:08.415Z",
"dateUpdated": "2026-11-13T06:00:08.415Z"
"dateUpdated": "2026-11-13T18:53:16.090Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-284",
"lang": "en",
"description": "CWE-284 Improper Access Control"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:49:43.260016Z",
"id": "CVE-2026-123670",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:53:16.090Z"
}
}
]
}
}
data/2026/123xxx/CVE-2026-123711.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-06T10:24:10.762Z",
"datePublished": "2026-11-13T06:00:08.588Z",
"dateUpdated": "2026-11-13T06:00:08.588Z"
"dateUpdated": "2026-11-13T18:53:00.080Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-287",
"lang": "en",
"description": "CWE-287 Improper Authentication"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.1,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:49:29.320574Z",
"id": "CVE-2026-123711",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:53:00.080Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124005.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-06T18:38:38.543Z",
"datePublished": "2026-11-12T19:42:31.109Z",
"dateUpdated": "2026-11-13T14:34:10.836Z"
"dateUpdated": "2026-11-13T19:06:31.671Z"
},
"containers": {
"cna": {
@@ -172,6 +172,40 @@
"x_generator": {
"engine": "vulncheck"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:04:00.346538Z",
"id": "CVE-2026-124005",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:06:31.671Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124009.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-06T18:38:38.543Z",
"datePublished": "2026-11-12T19:54:31.046Z",
"dateUpdated": "2026-11-13T14:35:35.464Z"
"dateUpdated": "2026-11-13T19:09:28.903Z"
},
"containers": {
"cna": {
@@ -172,6 +172,40 @@
"x_generator": {
"engine": "vulncheck"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:07:52.068133Z",
"id": "CVE-2026-124009",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:09:28.903Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124664.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-09T09:14:06.527Z",
"datePublished": "2026-11-13T06:00:08.763Z",
"dateUpdated": "2026-11-13T06:00:08.763Z"
"dateUpdated": "2026-11-13T18:52:45.073Z"
},
"containers": {
"cna": {
@@ -73,6 +73,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-200",
"lang": "en",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:49:20.632821Z",
"id": "CVE-2026-124664",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:52:45.073Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124763.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-09T12:50:51.991Z",
"datePublished": "2026-11-13T06:00:08.945Z",
"dateUpdated": "2026-11-13T06:00:08.945Z"
"dateUpdated": "2026-11-13T18:52:29.051Z"
},
"containers": {
"cna": {
@@ -87,6 +87,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-862",
"lang": "en",
"description": "CWE-862 Missing Authorization"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.1,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:49:09.043141Z",
"id": "CVE-2026-124763",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:52:29.051Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124822.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-09T13:24:25.289Z",
"datePublished": "2026-11-13T06:00:09.152Z",
"dateUpdated": "2026-11-13T06:00:09.152Z"
"dateUpdated": "2026-11-13T18:52:14.096Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-73",
"lang": "en",
"description": "CWE-73 External Control of File Name or Path"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 10,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:48:59.205278Z",
"id": "CVE-2026-124822",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:52:14.096Z"
}
}
]
}
}
data/2026/124xxx/CVE-2026-124833.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-09T13:52:06.074Z",
"datePublished": "2026-11-13T06:00:09.349Z",
"dateUpdated": "2026-11-13T06:00:09.349Z"
"dateUpdated": "2026-11-13T18:47:19.866Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-434",
"lang": "en",
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:43:53.388035Z",
"id": "CVE-2026-124833",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:47:19.866Z"
}
}
]
}
}
data/2026/125xxx/CVE-2026-125711.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-10T10:36:40.667Z",
"datePublished": "2026-11-13T06:00:09.524Z",
"dateUpdated": "2026-11-13T06:00:09.524Z"
"dateUpdated": "2026-11-13T18:51:58.599Z"
},
"containers": {
"cna": {
@@ -338,6 +338,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-79",
"lang": "en",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 3.5,
"attackVector": "NETWORK",
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "HIGH",
"confidentialityImpact": "LOW"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:48:49.509665Z",
"id": "CVE-2026-125711",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:51:58.599Z"
}
}
]
}
}
data/2026/125xxx/CVE-2026-125912.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-10T13:26:13.879Z",
"datePublished": "2026-11-13T06:00:09.699Z",
"dateUpdated": "2026-11-13T06:00:09.699Z"
"dateUpdated": "2026-11-13T18:51:44.096Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-94",
"lang": "en",
"description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.2,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:48:34.675473Z",
"id": "CVE-2026-125912",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:51:44.096Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126091.json
+6 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "cisa-cg",
"dateReserved": "2026-11-10T17:35:16.316Z",
"datePublished": "2026-11-13T17:11:44.088Z",
"dateUpdated": "2026-11-13T17:11:44.088Z"
"dateUpdated": "2026-11-13T18:32:56.261Z"
},
"containers": {
"cna": {
@@ -132,6 +132,10 @@
{
"value": "Alex Forman",
"lang": "en"
},
{
"value": "Mishka Kharlov",
"lang": "en"
}
],
"x_generator": {
@@ -141,7 +145,7 @@
"providerMetadata": {
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"shortName": "cisa-cg",
"dateUpdated": "2026-11-13T17:11:44.088Z"
"dateUpdated": "2026-11-13T18:32:56.261Z"
}
}
}
data/2026/126xxx/CVE-2026-126119.json
+64 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "WPScan",
"dateReserved": "2026-11-10T17:58:11.970Z",
"datePublished": "2026-11-13T06:00:09.870Z",
"dateUpdated": "2026-11-13T06:00:09.870Z"
"dateUpdated": "2026-11-13T18:47:29.202Z"
},
"containers": {
"cna": {
@@ -78,6 +78,68 @@
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-94",
"lang": "en",
"description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:43:22.949552Z",
"id": "CVE-2026-126119",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:47:29.202Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126191.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-10T20:07:44.957Z",
"datePublished": "2026-11-12T16:57:01.566Z",
"dateUpdated": "2026-11-12T16:57:01.566Z"
"dateUpdated": "2026-11-13T18:54:06.385Z"
},
"containers": {
"cna": {
@@ -100,6 +100,40 @@
"advisory": "GHSA-6655-6qjp-jx7x",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:52:59.234584Z",
"id": "CVE-2026-126191",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:54:06.385Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126197.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-10T20:07:44.957Z",
"datePublished": "2026-11-12T17:29:35.883Z",
"dateUpdated": "2026-11-12T17:29:35.883Z"
"dateUpdated": "2026-11-13T18:57:22.759Z"
},
"containers": {
"cna": {
@@ -100,6 +100,40 @@
"advisory": "GHSA-r5pp-jx86-r6r9",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:57:00.288680Z",
"id": "CVE-2026-126197",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:57:22.759Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126204.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-10T20:07:44.958Z",
"datePublished": "2026-11-12T18:47:40.963Z",
"dateUpdated": "2026-11-12T18:47:40.963Z"
"dateUpdated": "2026-11-13T19:03:41.720Z"
},
"containers": {
"cna": {
@@ -100,6 +100,40 @@
"advisory": "GHSA-j3cq-92fq-qg5f",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:01:53.223246Z",
"id": "CVE-2026-126204",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:03:41.720Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126473.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:42:24.800Z",
"datePublished": "2026-11-13T09:34:58.505Z",
"dateUpdated": "2026-11-13T09:34:58.505Z"
"dateUpdated": "2026-11-13T18:41:27.864Z"
},
"containers": {
"cna": {
@@ -139,6 +139,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-6xh3-fmm5-jjp4",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:40:58.842309Z",
"id": "CVE-2026-126473",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:41:27.864Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126477.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:42:24.800Z",
"datePublished": "2026-11-13T09:34:55.801Z",
"dateUpdated": "2026-11-13T09:34:55.801Z"
"dateUpdated": "2026-11-13T18:48:12.976Z"
},
"containers": {
"cna": {
@@ -146,6 +146,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:47:57.513703Z",
"id": "CVE-2026-126477",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:48:12.976Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126481.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:44:28.726Z",
"datePublished": "2026-11-13T09:34:52.945Z",
"dateUpdated": "2026-11-13T09:34:52.945Z"
"dateUpdated": "2026-11-13T18:47:07.713Z"
},
"containers": {
"cna": {
@@ -139,6 +139,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-mf55-7h68-r2rp",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:46:28.774834Z",
"id": "CVE-2026-126481",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:47:07.713Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126485.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:44:28.726Z",
"datePublished": "2026-11-13T09:34:50.219Z",
"dateUpdated": "2026-11-13T09:34:50.219Z"
"dateUpdated": "2026-11-13T18:45:34.580Z"
},
"containers": {
"cna": {
@@ -139,6 +139,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-7gjr-359j-5q93",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:45:01.002890Z",
"id": "CVE-2026-126485",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:45:34.580Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126489.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-10T21:44:28.726Z",
"datePublished": "2026-11-13T09:34:47.310Z",
"dateUpdated": "2026-11-13T09:34:47.310Z"
"dateUpdated": "2026-11-13T18:44:25.373Z"
},
"containers": {
"cna": {
@@ -144,6 +144,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/openemr/openemr/security/advisories/GHSA-8j6v-q545-q9q7",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:43:51.564255Z",
"id": "CVE-2026-126489",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:44:25.373Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126644.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "redhat",
"dateReserved": "2026-11-11T10:46:47.355Z",
"datePublished": "2026-11-12T10:50:16.148Z",
"dateUpdated": "2026-11-12T10:50:16.148Z"
"dateUpdated": "2026-11-13T18:33:43.281Z"
},
"containers": {
"cna": {
@@ -126,6 +126,40 @@
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:33:07.048496Z",
"id": "CVE-2026-126644",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:33:43.281Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126758.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulDB",
"dateReserved": "2026-11-11T16:58:32.820Z",
"datePublished": "2026-11-11T23:00:47.831Z",
"dateUpdated": "2026-11-11T23:00:47.831Z"
"dateUpdated": "2026-11-13T18:31:11.744Z"
},
"containers": {
"cna": {
@@ -180,6 +180,40 @@
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:30:55.379705Z",
"id": "CVE-2026-126758",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:31:11.744Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126837.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "mongodb",
"dateReserved": "2026-11-11T21:48:08.923Z",
"datePublished": "2026-11-12T17:00:11.830Z",
"dateUpdated": "2026-11-12T17:31:22.616Z"
"dateUpdated": "2026-11-13T18:56:09.680Z"
},
"containers": {
"cna": {
@@ -127,6 +127,40 @@
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:55:42.855460Z",
"id": "CVE-2026-126837",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:56:09.680Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126935.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-11T22:45:26.204Z",
"datePublished": "2026-11-11T22:53:20.141Z",
"dateUpdated": "2026-11-11T22:53:20.141Z"
"dateUpdated": "2026-11-13T18:29:30.385Z"
},
"containers": {
"cna": {
@@ -137,6 +137,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/diced/zipline/security/advisories/GHSA-7xv9-wr46-j578",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:28:15.881416Z",
"id": "CVE-2026-126935",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:29:30.385Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126938.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-11T22:56:41.844Z",
"datePublished": "2026-11-13T09:34:39.833Z",
"dateUpdated": "2026-11-13T09:34:39.833Z"
"dateUpdated": "2026-11-13T18:42:49.486Z"
},
"containers": {
"cna": {
@@ -122,6 +122,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/diced/zipline/security/advisories/GHSA-fp8p-hf8g-fw65",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:42:11.213094Z",
"id": "CVE-2026-126938",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:42:49.486Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126942.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-11T22:56:41.844Z",
"datePublished": "2026-11-13T09:34:37.092Z",
"dateUpdated": "2026-11-13T09:34:37.092Z"
"dateUpdated": "2026-11-13T18:28:10.242Z"
},
"containers": {
"cna": {
@@ -123,6 +123,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/diced/zipline/security/advisories/GHSA-84c9-r2mj-p9pp",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:27:23.067249Z",
"id": "CVE-2026-126942",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:28:10.242Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126946.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-11T22:57:48.492Z",
"datePublished": "2026-11-13T09:34:34.387Z",
"dateUpdated": "2026-11-13T09:34:34.387Z"
"dateUpdated": "2026-11-13T18:39:54.492Z"
},
"containers": {
"cna": {
@@ -122,6 +122,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/diced/zipline/security/advisories/GHSA-9j96-vvqc-h9f8",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:39:20.284165Z",
"id": "CVE-2026-126946",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:39:54.492Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126948.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-11T22:57:48.492Z",
"datePublished": "2026-11-13T09:34:33.024Z",
"dateUpdated": "2026-11-13T09:34:33.024Z"
"dateUpdated": "2026-11-13T18:38:32.510Z"
},
"containers": {
"cna": {
@@ -123,6 +123,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/diced/zipline/security/advisories/GHSA-fgwh-2pc5-wr73",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:37:53.666689Z",
"id": "CVE-2026-126948",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:38:32.510Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126952.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-11T22:57:48.492Z",
"datePublished": "2026-11-13T09:34:30.285Z",
"dateUpdated": "2026-11-13T09:34:30.285Z"
"dateUpdated": "2026-11-13T18:37:27.779Z"
},
"containers": {
"cna": {
@@ -117,6 +117,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/diced/zipline/security/advisories/GHSA-8g3f-425r-35rq",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:35:46.273471Z",
"id": "CVE-2026-126952",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:37:27.779Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126993.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulDB",
"dateReserved": "2026-11-12T07:52:29.790Z",
"datePublished": "2026-11-12T12:15:18.703Z",
"dateUpdated": "2026-11-12T12:15:18.703Z"
"dateUpdated": "2026-11-13T18:37:12.977Z"
},
"containers": {
"cna": {
@@ -166,6 +166,40 @@
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:36:47.864095Z",
"id": "CVE-2026-126993",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:37:12.977Z"
}
}
]
}
}
data/2026/126xxx/CVE-2026-126997.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulDB",
"dateReserved": "2026-11-12T08:02:04.098Z",
"datePublished": "2026-11-12T14:30:26.335Z",
"dateUpdated": "2026-11-12T14:30:26.335Z"
"dateUpdated": "2026-11-13T18:38:26.450Z"
},
"containers": {
"cna": {
@@ -181,6 +181,40 @@
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:37:57.522507Z",
"id": "CVE-2026-126997",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:38:26.450Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127058.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T13:05:14.832Z",
"datePublished": "2026-11-12T13:09:59.086Z",
"dateUpdated": "2026-11-12T13:09:59.086Z"
"dateUpdated": "2026-11-13T18:49:23.525Z"
},
"containers": {
"cna": {
@@ -154,6 +154,40 @@
"x_generator": {
"engine": "vulncheck"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:48:27.365350Z",
"id": "CVE-2026-127058",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:49:23.525Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127073.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T14:12:07.370Z",
"datePublished": "2026-11-13T09:34:27.520Z",
"dateUpdated": "2026-11-13T09:34:27.520Z"
"dateUpdated": "2026-11-13T18:34:48.190Z"
},
"containers": {
"cna": {
@@ -124,6 +124,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:34:34.459034Z",
"id": "CVE-2026-127073",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:34:48.190Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127077.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T14:12:08.852Z",
"datePublished": "2026-11-13T09:34:24.783Z",
"dateUpdated": "2026-11-13T09:34:24.783Z"
"dateUpdated": "2026-11-13T18:34:05.192Z"
},
"containers": {
"cna": {
@@ -124,6 +124,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:33:42.611024Z",
"id": "CVE-2026-127077",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:34:05.192Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127081.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T14:12:10.282Z",
"datePublished": "2026-11-13T09:34:20.852Z",
"dateUpdated": "2026-11-13T09:34:20.852Z"
"dateUpdated": "2026-11-13T18:32:22.758Z"
},
"containers": {
"cna": {
@@ -124,6 +124,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:31:37.112099Z",
"id": "CVE-2026-127081",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:32:22.758Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127085.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T14:14:20.971Z",
"datePublished": "2026-11-13T09:34:18.133Z",
"dateUpdated": "2026-11-13T09:34:18.133Z"
"dateUpdated": "2026-11-13T18:18:42.440Z"
},
"containers": {
"cna": {
@@ -138,6 +138,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/IgnisDa/ryot/security/advisories/GHSA-qwh4-gwr7-95x8",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:17:44.374719Z",
"id": "CVE-2026-127085",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:18:42.440Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127090.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T14:18:09.726Z",
"datePublished": "2026-11-13T09:34:15.399Z",
"dateUpdated": "2026-11-13T09:34:15.399Z"
"dateUpdated": "2026-11-13T18:25:56.216Z"
},
"containers": {
"cna": {
@@ -169,6 +169,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:24:36.800035Z",
"id": "CVE-2026-127090",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:25:56.216Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127094.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T14:27:04.667Z",
"datePublished": "2026-11-13T09:34:12.707Z",
"dateUpdated": "2026-11-13T15:42:33.224Z"
"dateUpdated": "2026-11-13T18:22:44.207Z"
},
"containers": {
"cna": {
@@ -136,6 +136,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:22:28.515903Z",
"id": "CVE-2026-127094",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:22:44.207Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127111.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T15:11:23.624Z",
"datePublished": "2026-11-12T15:53:16.849Z",
"dateUpdated": "2026-11-12T15:53:16.849Z"
"dateUpdated": "2026-11-13T18:41:16.415Z"
},
"containers": {
"cna": {
@@ -142,6 +142,40 @@
"x_generator": {
"engine": "vulncheck"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:39:48.154981Z",
"id": "CVE-2026-127111",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:41:16.415Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127135.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T15:43:36.985Z",
"datePublished": "2026-11-12T15:58:44.808Z",
"dateUpdated": "2026-11-12T15:58:44.808Z"
"dateUpdated": "2026-11-13T18:51:50.877Z"
},
"containers": {
"cna": {
@@ -142,6 +142,40 @@
"x_generator": {
"engine": "vulncheck"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:49:39.482833Z",
"id": "CVE-2026-127135",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:51:50.877Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127204.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T16:30:10.903Z",
"datePublished": "2026-11-12T17:46:44.117Z",
"dateUpdated": "2026-11-12T17:46:44.117Z"
"dateUpdated": "2026-11-13T18:59:29.502Z"
},
"containers": {
"cna": {
@@ -140,6 +140,40 @@
"x_generator": {
"engine": "vulncheck"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:58:47.797078Z",
"id": "CVE-2026-127204",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:59:29.502Z"
}
}
]
}
}
data/2026/127xxx/CVE-2026-127213.json
+150
View File
@@ -0,0 +1,150 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-127213",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "PUBLISHED",
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T16:30:10.903Z",
"datePublished": "2026-11-13T19:18:18.761Z",
"dateUpdated": "2026-11-13T19:18:18.761Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-13T19:18:18.761Z"
},
"title": "LearnPress Course Wishlist < 4.1.2 IDOR via render_button",
"descriptions": [
{
"lang": "en",
"value": "LearnPress Course Wishlist Add-on before 4.1.2 contains an insecure direct object reference vulnerability that allows remote attackers to manipulate any user's course wishlist by supplying an arbitrary user_id parameter to the render_button callback instead of relying on the session identity. Attackers can exploit the publicly accessible load_content_via_ajax REST route, which only requires a public wp_rest nonce, to add or remove courses from any user's wishlist and determine whether a given course is wishlisted by iterating user_id and course_id values."
}
],
"tags": [
"x_open-source"
],
"datePublic": "2026-11-11T00:00:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Authorization Bypass Through User-Controlled Key",
"cweId": "CWE-639",
"type": "CWE"
}
]
}
],
"affected": [
{
"defaultStatus": "unaffected",
"vendor": "ThimPress",
"product": "LearnPress – Course Wishlist",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThan": "4.1.2"
}
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"subIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"version": "4.0",
"baseSeverity": "MEDIUM",
"baseScore": 6.9,
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"
}
},
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"version": "3.1",
"baseSeverity": "MEDIUM",
"baseScore": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
}
],
"references": [
{
"url": "https://wordpress.org/plugins/learnpress-wishlist/#developers",
"name": "WordPress Changelog",
"tags": [
"release-notes",
"patch"
]
},
{
"url": "https://www.vulncheck.com/advisories/learnpress-course-wishlist-idor-via-render-button",
"name": "VulnCheck Advisory: LearnPress Course Wishlist < 4.1.2 IDOR via render_button",
"tags": [
"third-party-advisory"
]
}
],
"credits": [
{
"lang": "en",
"value": "xuannthanh",
"type": "finder"
},
{
"lang": "en",
"value": "buiih",
"type": "reporter"
}
],
"x_generator": {
"engine": "vulncheck"
}
}
}
}
data/2026/128xxx/CVE-2026-128017.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T20:32:53.532Z",
"datePublished": "2026-11-13T09:34:09.979Z",
"dateUpdated": "2026-11-13T09:34:09.979Z"
"dateUpdated": "2026-11-13T18:22:03.578Z"
},
"containers": {
"cna": {
@@ -147,6 +147,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/php/frankenphp/security/advisories/GHSA-h764-4wh7-m7j2",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:21:40.109899Z",
"id": "CVE-2026-128017",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:22:03.578Z"
}
}
]
}
}
data/2026/128xxx/CVE-2026-128021.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T20:32:53.532Z",
"datePublished": "2026-11-13T09:34:07.192Z",
"dateUpdated": "2026-11-13T09:34:07.192Z"
"dateUpdated": "2026-11-13T18:21:07.756Z"
},
"containers": {
"cna": {
@@ -145,6 +145,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/php/frankenphp/security/advisories/GHSA-4gfw-9v29-gp9h",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:20:46.471001Z",
"id": "CVE-2026-128021",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:21:07.756Z"
}
}
]
}
}
data/2026/128xxx/CVE-2026-128025.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T20:33:43.125Z",
"datePublished": "2026-11-13T09:34:04.485Z",
"dateUpdated": "2026-11-13T09:34:04.485Z"
"dateUpdated": "2026-11-13T18:20:18.630Z"
},
"containers": {
"cna": {
@@ -140,6 +140,48 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/php/frankenphp/security/advisories/GHSA-xxjp-cjxr-2x6m",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:19:15.595269Z",
"id": "CVE-2026-128025",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:20:18.630Z"
}
}
]
}
}
data/2026/128xxx/CVE-2026-128033.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-12T20:33:43.125Z",
"datePublished": "2026-11-13T09:33:59.025Z",
"dateUpdated": "2026-11-13T09:33:59.025Z"
"dateUpdated": "2026-11-13T18:17:07.931Z"
},
"containers": {
"cna": {
@@ -152,6 +152,40 @@
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:16:28.377475Z",
"id": "CVE-2026-128033",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:17:07.931Z"
}
}
]
}
}
data/2026/128xxx/CVE-2026-128080.json
+108
View File
@@ -0,0 +1,108 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128080",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T21:24:51.130Z",
"datePublished": "2026-11-13T18:25:38.014Z",
"dateUpdated": "2026-11-13T18:25:38.014Z"
},
"containers": {
"cna": {
"title": "OpenTelemetry JavaScript: Insertion of Sensitive Information into Log File and Exposure of Sensitive Information to an Unauthorized Actor in @opentelemetry/instrumentation-http",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"lang": "en",
"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-532",
"lang": "en",
"description": "CWE-532: Insertion of Sensitive Information into Log File",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-3v2p-hm54-8qcq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-3v2p-hm54-8qcq"
},
{
"name": "https://github.com/open-telemetry/opentelemetry-js/commit/e086dec7f9304107ef6d50b5877be88895c06aa7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/open-telemetry/opentelemetry-js/commit/e086dec7f9304107ef6d50b5877be88895c06aa7"
},
{
"name": "https://github.com/open-telemetry/opentelemetry-js/releases/tag/experimental/v0.222.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/open-telemetry/opentelemetry-js/releases/tag/experimental/v0.222.0"
}
],
"affected": [
{
"vendor": "open-telemetry",
"product": "opentelemetry-js",
"versions": [
{
"version": ">= 0.204.0, < 0.222.0",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:25:38.014Z"
},
"descriptions": [
{
"lang": "en",
"value": "OpenTelemetry JavaScript is the OpenTelemetry JavaScript client. From 0.204.0 until 0.222.0, @opentelemetry/instrumentation-http writes the raw query string from incoming HTTP requests to the url.query server-span attribute without applying the redactedQueryParams protection used for outgoing spans. Services receiving signed URLs or other credentials in query parameters can therefore export still-valid secrets to tracing backends, where observability infrastructure and users with span-read access may read them. The redactedQueryParams option does not protect incoming spans in affected versions. This issue is fixed in version 0.222.0."
}
],
"source": {
"advisory": "GHSA-3v2p-hm54-8qcq",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128081.json
+116
View File
@@ -0,0 +1,116 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128081",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T21:24:51.130Z",
"datePublished": "2026-11-13T18:35:45.452Z",
"dateUpdated": "2026-11-13T18:35:45.452Z"
},
"containers": {
"cna": {
"title": "AutoMapper: Denial of Service via uncontrolled recursion that bypasses MaxDepth",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-674",
"lang": "en",
"description": "CWE-674: Uncontrolled Recursion",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/LuckyPennySoftware/AutoMapper/security/advisories/GHSA-gpwp-5797-mjff",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/LuckyPennySoftware/AutoMapper/security/advisories/GHSA-gpwp-5797-mjff"
},
{
"name": "https://github.com/LuckyPennySoftware/AutoMapper/commit/aee81b50574c3c7005283cca2b2396e295bd8ed9",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/LuckyPennySoftware/AutoMapper/commit/aee81b50574c3c7005283cca2b2396e295bd8ed9"
},
{
"name": "https://github.com/LuckyPennySoftware/AutoMapper/commit/bdbbf5967d20d28e611ab65de1d96d1047a95ab9",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/LuckyPennySoftware/AutoMapper/commit/bdbbf5967d20d28e611ab65de1d96d1047a95ab9"
},
{
"name": "https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v15.1.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v15.1.4"
},
{
"name": "https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v16.3.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v16.3.0"
}
],
"affected": [
{
"vendor": "LuckyPennySoftware",
"product": "AutoMapper",
"versions": [
{
"version": ">= 16.0.0, < 16.3.0",
"status": "affected"
},
{
"version": "< 15.1.4",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:35:45.452Z"
},
"descriptions": [
{
"lang": "en",
"value": "AutoMapper is a convention-based object-object mapper in .NET. Prior to 15.1.4 and from 16.0.0 until 16.3.0, AutoMapper can recurse without an effective MaxDepth limit when mapping polymorphic graphs through Include or IncludeBase, runtime-typed object or interface members, nested Dictionary<string, object> or ExpandoObject sources, or recursive ConvertUsing type converters. Deep attacker-influenced graphs on these paths can throw an uncatchable StackOverflowException and terminate the process. This issue is fixed in versions 15.1.4 and 16.3.0."
}
],
"source": {
"advisory": "GHSA-gpwp-5797-mjff",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128082.json
+116
View File
@@ -0,0 +1,116 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128082",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T21:24:51.130Z",
"datePublished": "2026-11-13T18:37:30.465Z",
"dateUpdated": "2026-11-13T18:37:30.465Z"
},
"containers": {
"cna": {
"title": "AutoMapper: Uncontrolled Recursion with Constructor Parameters",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-674",
"lang": "en",
"description": "CWE-674: Uncontrolled Recursion",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/LuckyPennySoftware/AutoMapper/security/advisories/GHSA-6vhm-j9h7-f9gh",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/LuckyPennySoftware/AutoMapper/security/advisories/GHSA-6vhm-j9h7-f9gh"
},
{
"name": "https://github.com/LuckyPennySoftware/AutoMapper/commit/4d51a4b8125b4d2302f2f1f455747c9648ad1acb",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/LuckyPennySoftware/AutoMapper/commit/4d51a4b8125b4d2302f2f1f455747c9648ad1acb"
},
{
"name": "https://github.com/LuckyPennySoftware/AutoMapper/commit/639c2748cb9d3d07df8b86879ba7bcf211675c86",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/LuckyPennySoftware/AutoMapper/commit/639c2748cb9d3d07df8b86879ba7bcf211675c86"
},
{
"name": "https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v15.1.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v15.1.4"
},
{
"name": "https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v16.3.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v16.3.0"
}
],
"affected": [
{
"vendor": "LuckyPennySoftware",
"product": "AutoMapper",
"versions": [
{
"version": ">= 16.0.0, < 16.3.0",
"status": "affected"
},
{
"version": "< 15.1.4",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:37:30.465Z"
},
"descriptions": [
{
"lang": "en",
"value": "AutoMapper is a convention-based object-object mapper in .NET. Prior to 15.1.4 and from 16.0.0 until 16.3.0, AutoMapper increments type depth only after creating the destination, so recursive mapping performed through constructor parameters occurs before MaxDepth is counted. Destinations built through positional records or other constructors, and recursive ConstructUsing mappings that call context.Mapper, can therefore bypass explicit MaxDepth values and the default limit of 64. Deep attacker-influenced input can throw an uncatchable StackOverflowException and terminate the process. This issue is fixed in versions 15.1.4 and 16.3.0."
}
],
"source": {
"advisory": "GHSA-6vhm-j9h7-f9gh",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128083.json
+126
View File
@@ -0,0 +1,126 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128083",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T21:24:51.130Z",
"datePublished": "2026-11-13T18:44:40.992Z",
"dateUpdated": "2026-11-13T18:44:40.992Z"
},
"containers": {
"cna": {
"title": "Laravel: Task Output Injection - Concurrency Process",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"lang": "en",
"description": "CWE-502: Deserialization of Untrusted Data",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "LOW",
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L",
"version": "4.0"
}
}
],
"references": [
{
"name": "https://github.com/laravel/framework/security/advisories/GHSA-63hm-g96r-2m2q",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/laravel/framework/security/advisories/GHSA-63hm-g96r-2m2q"
},
{
"name": "https://github.com/laravel/framework/pull/62297",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/laravel/framework/pull/62297"
},
{
"name": "https://github.com/laravel/framework/commit/0f904940d176d51db1105cc925136f01bb69e92c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/laravel/framework/commit/0f904940d176d51db1105cc925136f01bb69e92c"
},
{
"name": "https://github.com/laravel/framework/commit/c37133b89b30a86eb404537151edd8944e938f0a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/laravel/framework/commit/c37133b89b30a86eb404537151edd8944e938f0a"
},
{
"name": "https://github.com/laravel/framework/releases/tag/v12.71.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/laravel/framework/releases/tag/v12.71.0"
},
{
"name": "https://github.com/laravel/framework/releases/tag/v13.40.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/laravel/framework/releases/tag/v13.40.0"
}
],
"affected": [
{
"vendor": "laravel",
"product": "framework",
"versions": [
{
"version": ">= 13.0.0, < 13.40.0",
"status": "affected"
},
{
"version": "< 12.71.0",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:44:40.992Z"
},
"descriptions": [
{
"lang": "en",
"value": "Laravel is a web application framework. Prior to 12.71.0 and 13.40.0, Laravel's Concurrency::run process driver can treat a forged internal result message in child standard output as framework output. An application route must invoke Concurrency::run, and a task must write attacker-controlled bytes at the start of the child's standard output that form a complete JSON document followed by gzip magic bytes. Under those application-specific conditions, an attacker can forge the internal result message and achieve remote code execution. The affected behavior is not exposed by default and requires application code that routes untrusted input into task output. This issue is fixed in versions 12.71.0 and 13.40.0."
}
],
"source": {
"advisory": "GHSA-63hm-g96r-2m2q",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128084.json
+105
View File
@@ -0,0 +1,105 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128084",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T21:24:51.130Z",
"datePublished": "2026-11-13T18:47:22.594Z",
"dateUpdated": "2026-11-13T18:47:22.594Z"
},
"containers": {
"cna": {
"title": "sqlite3-ruby: SQL Query Truncation",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-681",
"lang": "en",
"description": "CWE-681: Incorrect Conversion between Numeric Types",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-4fqr-96q8-xrfx",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-4fqr-96q8-xrfx"
},
{
"name": "https://github.com/sparklemotion/sqlite3-ruby/pull/762",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sparklemotion/sqlite3-ruby/pull/762"
},
{
"name": "https://github.com/sparklemotion/sqlite3-ruby/commit/41059aa3ccc2c0f910d6df4fccfe36b3c3c6c649",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sparklemotion/sqlite3-ruby/commit/41059aa3ccc2c0f910d6df4fccfe36b3c3c6c649"
},
{
"name": "https://github.com/sparklemotion/sqlite3-ruby/releases/tag/v2.10.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sparklemotion/sqlite3-ruby/releases/tag/v2.10.2"
}
],
"affected": [
{
"vendor": "sparklemotion",
"product": "sqlite3-ruby",
"versions": [
{
"version": "< 2.10.2",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:47:22.594Z"
},
"descriptions": [
{
"lang": "en",
"value": "sqlite3 provides Ruby bindings for the SQLite3 embedded database. Prior to 2.10.2, sqlite3-ruby casts Ruby string lengths to int before passing SQL through Database#prepare, bound String or Blob values through Statement#bind_param, and String or Blob results from Ruby-defined SQL functions and aggregates through Database#create_function and Database#create_aggregate. On 64-bit platforms, a string of 4 GiB (2^32 bytes) or larger can wrap the length so SQLite processes only a prefix. A truncated SQL string can drop trailing clauses such as a WHERE condition, while a truncated bound value matters only when the application validated the full value before binding it. Exploitation requires the application and server to accept and retain the unusually large attacker-controlled string. If a dropped SQL clause contained a bind placeholder, binding raises SQLite3::RangeException instead of running the query. This issue is fixed in version 2.10.2."
}
],
"source": {
"advisory": "GHSA-4fqr-96q8-xrfx",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128085.json
+152
View File
@@ -0,0 +1,152 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128085",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T21:24:51.131Z",
"datePublished": "2026-11-13T18:53:14.393Z",
"dateUpdated": "2026-11-13T18:53:14.393Z"
},
"containers": {
"cna": {
"title": "opentelemetry-go: AttributeValueLengthLimit is fully bypassed by attribute values composed of valid U+FFFD runes",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-135",
"lang": "en",
"description": "CWE-135: Incorrect Calculation of Multi-Byte String Length",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-770",
"lang": "en",
"description": "CWE-770: Allocation of Resources Without Limits or Throttling",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-q7gw-24fr-5p69",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-q7gw-24fr-5p69"
},
{
"name": "https://github.com/open-telemetry/opentelemetry-go/commit/017b08c7f1018b619991aaf6b2299d4beb9da1d3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/open-telemetry/opentelemetry-go/commit/017b08c7f1018b619991aaf6b2299d4beb9da1d3"
},
{
"name": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v1.47.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v1.47.0"
},
{
"name": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.47.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.47.0"
},
{
"name": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/trace/v1.47.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/trace/v1.47.0"
}
],
"affected": [
{
"vendor": "open-telemetry",
"product": "opentelemetry-go",
"versions": [
{
"version": ">= 0.9.0, < 1.47.0",
"status": "affected"
}
]
},
{
"vendor": "open-telemetry",
"product": "go.opentelemetry.io/otel/sdk",
"versions": [
{
"version": ">= 1.33.0, < 1.47.0",
"status": "affected"
}
]
},
{
"vendor": "open-telemetry",
"product": "go.opentelemetry.io/otel/sdk",
"versions": [
{
"version": ">= 0.9.0, < 1.47.0",
"status": "affected"
}
]
},
{
"vendor": "open-telemetry",
"product": "go.opentelemetry.io/otel/sdk",
"versions": [
{
"version": ">= 1.35.0, < 1.47.0",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:53:14.393Z"
},
"descriptions": [
{
"lang": "en",
"value": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. From SDK version 1.33.0, SDK log version 0.9.0, and trace version 1.35.0 until version 1.47.0, the AttributeValueLengthLimit and WithAttributeValueLengthLimit truncation paths in sdk/internal/attrnorm, sdk/log/internal/attrnorm, and trace/auto.go do not count valid U+FFFD replacement characters. This is a distinct incomplete-fix defect in the replacement truncation code introduced by the remediation for CVE-2026-81869. Values composed of or dominated by those characters can therefore exceed the configured character and memory bound in span, log-record, and auto-instrumentation trace attributes. Attacker-controlled telemetry attributes can increase retained memory and pipeline pressure, while confidentiality and integrity are not affected. This issue is fixed in version 1.47.0."
}
],
"source": {
"advisory": "GHSA-q7gw-24fr-5p69",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128086.json
+115
View File
@@ -0,0 +1,115 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128086",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T21:24:51.131Z",
"datePublished": "2026-11-13T18:54:15.661Z",
"dateUpdated": "2026-11-13T18:54:15.661Z"
},
"containers": {
"cna": {
"title": "OpenTelemetry-Go: Eager W3C baggage-property materialization causes bounded memory-allocation amplification",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"lang": "en",
"description": "CWE-400: Uncontrolled Resource Consumption",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-405",
"lang": "en",
"description": "CWE-405: Asymmetric Resource Consumption (Amplification)",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-rrfc-gjm9-cgrj",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-rrfc-gjm9-cgrj"
},
{
"name": "https://github.com/open-telemetry/opentelemetry-go/pull/9024",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/open-telemetry/opentelemetry-go/pull/9024"
},
{
"name": "https://github.com/open-telemetry/opentelemetry-go/commit/f09d1de32f4ac7e5ef16394533721106b1a57b89",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/open-telemetry/opentelemetry-go/commit/f09d1de32f4ac7e5ef16394533721106b1a57b89"
},
{
"name": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.47.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.47.0"
}
],
"affected": [
{
"vendor": "open-telemetry",
"product": "opentelemetry-go",
"versions": [
{
"version": ">= 1.0.0-RC1, < 1.47.0",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:54:15.661Z"
},
"descriptions": [
{
"lang": "en",
"value": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.0.0-RC1 until version 1.47.0, baggage.Parse and propagation.Baggage.Extract eagerly materialize every W3C baggage property through parseMember, grow property slices, serialize members, and copy properties into internal/baggage.Item. A valid densely populated baggage header can therefore cause allocation traffic and retained memory disproportionate to its bounded input size. Remote impact requires baggage extraction to be enabled, attacker-controlled input to reach it, and extraction to run before authentication or on a public route; the evidence establishes increased allocation and garbage-collection pressure but not reliable process termination. This issue is fixed in version 1.47.0."
}
],
"source": {
"advisory": "GHSA-rrfc-gjm9-cgrj",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128087.json
+115
View File
@@ -0,0 +1,115 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128087",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T21:24:51.131Z",
"datePublished": "2026-11-13T19:03:26.702Z",
"dateUpdated": "2026-11-13T19:03:26.702Z"
},
"containers": {
"cna": {
"title": "russh kex_done: shared-secret callback runs before server host-key verification",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-696",
"lang": "en",
"description": "CWE-696: Incorrect Behavior Order",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-863",
"lang": "en",
"description": "CWE-863: Incorrect Authorization",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/Eugeny/russh/security/advisories/GHSA-9264-jvgf-6w2f",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/Eugeny/russh/security/advisories/GHSA-9264-jvgf-6w2f"
},
{
"name": "https://github.com/Eugeny/russh/pull/808",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Eugeny/russh/pull/808"
},
{
"name": "https://github.com/Eugeny/russh/commit/43a46d67a80a7355fcd2fb25e7e00d79aec8184c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Eugeny/russh/commit/43a46d67a80a7355fcd2fb25e7e00d79aec8184c"
},
{
"name": "https://github.com/Eugeny/russh/releases/tag/v0.65.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Eugeny/russh/releases/tag/v0.65.1"
}
],
"affected": [
{
"vendor": "Eugeny",
"product": "russh",
"versions": [
{
"version": ">= 0.55.0, < 0.65.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:03:26.702Z"
},
"descriptions": [
{
"lang": "en",
"value": "russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From version 0.55.0 until version 0.65.1, the initial key exchange invokes client::Handler::kex_done() with the raw shared secret before check_server_key() accepts the server host key or certificate. A malicious SSH server can therefore trigger application-defined secondary-channel initialization or early data handling even when the server identity is subsequently rejected. Ordinary clients that keep the callback's no-op default or independently defer callback-derived actions until trust is confirmed are not affected. This issue is fixed in version 0.65.1."
}
],
"source": {
"advisory": "GHSA-9264-jvgf-6w2f",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/128xxx/CVE-2026-128088.json
+115
View File
@@ -0,0 +1,115 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128088",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-11-12T21:24:51.131Z",
"datePublished": "2026-11-13T19:07:42.568Z",
"dateUpdated": "2026-11-13T19:07:42.568Z"
},
"containers": {
"cna": {
"title": "russh try_sign: asynchronous confirmation can sign after agent lock",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-367",
"lang": "en",
"description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-863",
"lang": "en",
"description": "CWE-863: Incorrect Authorization",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.2,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/Eugeny/russh/security/advisories/GHSA-736f-c93q-9fwx",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/Eugeny/russh/security/advisories/GHSA-736f-c93q-9fwx"
},
{
"name": "https://github.com/Eugeny/russh/pull/808",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Eugeny/russh/pull/808"
},
{
"name": "https://github.com/Eugeny/russh/commit/43a46d67a80a7355fcd2fb25e7e00d79aec8184c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Eugeny/russh/commit/43a46d67a80a7355fcd2fb25e7e00d79aec8184c"
},
{
"name": "https://github.com/Eugeny/russh/releases/tag/v0.65.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Eugeny/russh/releases/tag/v0.65.1"
}
],
"affected": [
{
"vendor": "Eugeny",
"product": "russh",
"versions": [
{
"version": ">= 0.65.0, < 0.65.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:07:42.568Z"
},
"descriptions": [
{
"lang": "en",
"value": "russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to version 0.65.1, try_sign() captures an Arc<PrivateKey> before awaiting Agent::confirm() and does not revalidate the shared lock state or key presence after the await. This is a distinct residual defect in the remediation for CVE-2026-116794. A peer, including a remote SSH server using agent forwarding, can begin a confirmation-constrained signature request while the agent is unlocked and receive the signature after another connection locks the agent if the stale confirmation returns true. New post-lock requests are rejected and private key material is not disclosed, but the pending operation bypasses the current lock state. This issue is fixed in version 0.65.1."
}
],
"source": {
"advisory": "GHSA-736f-c93q-9fwx",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/129xxx/CVE-2026-129217.json
+240
View File
@@ -0,0 +1,240 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129217",
"assignerOrgId": "57a55968-44ac-464c-a794-6ba3baad09c4",
"state": "PUBLISHED",
"assignerShortName": "NetDEF",
"dateReserved": "2026-11-13T19:02:49.870Z",
"datePublished": "2026-11-13T19:06:40.219Z",
"dateUpdated": "2026-11-13T19:06:40.219Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "57a55968-44ac-464c-a794-6ba3baad09c4",
"shortName": "NetDEF",
"dateUpdated": "2026-11-13T19:06:40.219Z"
},
"title": "bgpd: out-of-bounds heap read and crash on NOTIFICATION Cease/Hard Reset with one data byte",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds read",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-191",
"description": "CWE-191 Integer underflow (wrap or wraparound)",
"type": "CWE"
}
]
}
],
"impacts": [
{
"capecId": "CAPEC-540",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-540 Overread Buffers"
}
]
}
],
"affected": [
{
"vendor": "FRRouting",
"product": "FRRouting",
"repo": "https://github.com/frrouting/frr.git",
"modules": [
"bgpd"
],
"programFiles": [
"bgpd/bgp_packet.c"
],
"programRoutines": [
{
"name": "bgp_notify_decapsulate_hard_reset()"
}
],
"versions": [
{
"status": "affected",
"version": "10.5.0",
"lessThan": "10.5.2",
"versionType": "semver"
},
{
"status": "affected",
"version": "10.4.0",
"lessThan": "10.4.3",
"versionType": "semver"
},
{
"status": "affected",
"version": "10.3",
"lessThan": "10.3.4",
"versionType": "custom"
},
{
"status": "affected",
"version": "10.2",
"lessThan": "10.2.6",
"versionType": "custom"
},
{
"status": "affected",
"version": "10.1",
"lessThan": "10.1.5",
"versionType": "custom"
},
{
"status": "affected",
"version": "8.3",
"lessThan": "10.0.5",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "8.3",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "In FRRouting (FRR) 8.3 through 10.5.1, bgp_notify_decapsulate_hard_reset() in bgpd/bgp_packet.c does not validate the length of the data field of a received BGP NOTIFICATION Cease/Hard Reset message (RFC 8538). When the data field is exactly one byte long, the function reads one byte past the end of a heap buffer and the 16-bit length of the encapsulated data underflows to 65535, causing a 65535-byte out-of-bounds heap read followed by an assertion failure. A remote BGP peer that has established a session and negotiated the Graceful Restart capability with the Notification (N) bit can send such a message to crash the bgpd daemon, terminating all BGP sessions (denial of service). This is fixed in 10.0.5, 10.1.5, 10.2.6, 10.3.4, 10.4.3, 10.5.2 and 10.6.0.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "In FRRouting (FRR) 8.3 through 10.5.1, bgp_notify_decapsulate_hard_reset() in bgpd/bgp_packet.c does not validate the length of the data field of a received BGP NOTIFICATION Cease/Hard Reset message (RFC 8538). When the data field is exactly one byte long, the function reads one byte past the end of a heap buffer and the 16-bit length of the encapsulated data underflows to 65535, causing a 65535-byte out-of-bounds heap read followed by an assertion failure. A remote BGP peer that has established a session and negotiated the Graceful Restart capability with the Notification (N) bit can send such a message to crash the bgpd daemon, terminating all BGP sessions (denial of service). This is fixed in 10.0.5, 10.1.5, 10.2.6, 10.3.4, 10.4.3, 10.5.2 and 10.6.0."
}
]
}
],
"references": [
{
"url": "https://github.com/FRRouting/frr/issues/20793",
"tags": [
"issue-tracking"
]
},
{
"url": "https://github.com/FRRouting/frr/pull/20796",
"tags": [
"patch"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"subIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"version": "4.0",
"baseSeverity": "MEDIUM",
"baseScore": 6,
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N"
}
}
],
"configurations": [
{
"lang": "en",
"value": "bgpd must be running with at least one BGP neighbor (or dynamic listen range) through which the attacker can establish a session, and the Graceful Restart capability with the Notification (N) bit must be negotiated in the OPEN exchange with that peer. This is the default configuration: \"bgp graceful-restart notification\" is enabled by default since FRR 8.3 and the Graceful Restart capability is advertised by default (helper mode). Instances configured with \"no bgp graceful-restart notification\" or \"bgp graceful-restart-disable\" are not affected.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "bgpd must be running with at least one BGP neighbor (or dynamic listen range) through which the attacker can establish a session, and the Graceful Restart capability with the Notification (N) bit must be negotiated in the OPEN exchange with that peer. This is the default configuration: \"bgp graceful-restart notification\" is enabled by default since FRR 8.3 and the Graceful Restart capability is advertised by default (helper mode). Instances configured with \"no bgp graceful-restart notification\" or \"bgp graceful-restart-disable\" are not affected."
}
]
}
],
"workarounds": [
{
"lang": "en",
"value": "Graceful Restart Capability needs to be enabled. Disable the Capability with \"no bgp graceful-restart notification\" or \"bgp graceful-restart-disable\"",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Graceful Restart Capability needs to be enabled. Disable the Capability with&nbsp;\"no bgp graceful-restart notification\"&nbsp;or \"bgp graceful-restart-disable\""
}
]
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to a fixed version of FRRouting",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Upgrade to a fixed version of FRRouting"
}
]
}
],
"timeline": [
{
"time": "2026-02-12T07:59:00.000Z",
"lang": "en",
"value": "Github Issue opened (no responsible disclosure)"
}
],
"credits": [
{
"lang": "en",
"value": "Fault Chain (https://faultchain.com/)",
"type": "finder"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
data/2026/15xxx/CVE-2026-15309.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "Wordfence",
"dateReserved": "2026-07-09T17:22:09.551Z",
"datePublished": "2026-11-12T11:32:16.143Z",
"dateUpdated": "2026-11-12T11:32:16.143Z"
"dateUpdated": "2026-11-13T18:34:49.562Z"
},
"containers": {
"cna": {
@@ -88,6 +88,40 @@
"value": "Disclosed"
}
]
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:34:24.332689Z",
"id": "CVE-2026-15309",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:34:49.562Z"
}
}
]
}
}
data/2026/18xxx/CVE-2026-18379.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "redhat",
"dateReserved": "2026-07-30T11:14:12.635Z",
"datePublished": "2026-11-12T18:49:34.253Z",
"dateUpdated": "2026-11-12T23:25:09.829Z"
"dateUpdated": "2026-11-13T19:07:35.156Z"
},
"containers": {
"cna": {
@@ -132,6 +132,40 @@
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:06:54.607593Z",
"id": "CVE-2026-18379",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:07:35.156Z"
}
}
]
}
}
data/2026/40xxx/CVE-2026-40820.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "CERTVDE",
"dateReserved": "2026-04-15T09:33:02.611Z",
"datePublished": "2026-11-12T07:41:47.576Z",
"dateUpdated": "2026-11-12T07:41:47.576Z"
"dateUpdated": "2026-11-13T18:32:34.128Z"
},
"containers": {
"cna": {
@@ -350,6 +350,40 @@
"x_generator": {
"engine": "Vulnogram 0.4.0"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:31:54.821966Z",
"id": "CVE-2026-40820",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:32:34.128Z"
}
}
]
}
}
data/2026/43xxx/CVE-2026-43626.json
+28
View File
@@ -0,0 +1,28 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-43626",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "REJECTED",
"dateReserved": "2026-05-01T18:22:45.640Z",
"dateUpdated": "2026-11-13T19:02:19.564Z",
"dateRejected": "2026-11-13T19:02:19.564Z",
"assignerShortName": "VulnCheck"
},
"containers": {
"cna": {
"rejectedReasons": [
{
"lang": "en",
"value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority, replacedby CVE-2026-70640."
}
],
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-13T19:02:19.564Z"
}
}
}
}
data/2026/45xxx/CVE-2026-45341.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-05-11T21:40:08.177Z",
"datePublished": "2026-11-12T20:00:08.694Z",
"dateUpdated": "2026-11-12T20:00:08.694Z"
"dateUpdated": "2026-11-13T19:10:20.614Z"
},
"containers": {
"cna": {
@@ -83,6 +83,48 @@
"advisory": "GHSA-fv2r-c2m2-7qhh",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-fv2r-c2m2-7qhh",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:10:04.812347Z",
"id": "CVE-2026-45341",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:10:20.614Z"
}
}
]
}
}
data/2026/47xxx/CVE-2026-47217.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-05-18T22:25:21.258Z",
"datePublished": "2026-11-12T20:01:27.465Z",
"dateUpdated": "2026-11-12T20:01:27.465Z"
"dateUpdated": "2026-11-13T19:12:27.192Z"
},
"containers": {
"cna": {
@@ -120,6 +120,48 @@
"advisory": "GHSA-wjw5-q9g6-2764",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-wjw5-q9g6-2764",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T19:12:10.514079Z",
"id": "CVE-2026-47217",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T19:12:27.192Z"
}
}
]
}
}
data/2026/62xxx/CVE-2026-62975.json
+94
View File
@@ -0,0 +1,94 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-62975",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-14T22:48:09.780Z",
"datePublished": "2026-11-13T18:38:57.163Z",
"dateUpdated": "2026-11-13T18:38:57.163Z"
},
"containers": {
"cna": {
"title": "BACnet Stack: Replacing a RAMFS record with a shorter one via `AtomicWriteFile(record-access)` can trigger a heap out-of-bounds read",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"lang": "en",
"description": "CWE-125: Out-of-bounds Read",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"references": [
{
"name": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-cf8g-hp9m-9fvv",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-cf8g-hp9m-9fvv"
},
{
"name": "https://github.com/bacnet-stack/bacnet-stack/pull/1408",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/pull/1408"
}
],
"affected": [
{
"vendor": "bacnet-stack",
"product": "bacnet-stack",
"versions": [
{
"version": "< 1.5.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:38:57.163Z"
},
"descriptions": [
{
"lang": "en",
"value": "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.5.1, the RAMFS-backed FILE implementation accepts AtomicWriteFile(record-access) requests that replace existing records with caller-controlled content. If a client replaces a record with shorter data, the backend can shrink the heap allocation and then continue processing with a trailing-copy length derived from the old layout. During that replace path, the RAMFS backend computes the trailing-copy length from the old file layout, then shrinks the heap allocation, and finally uses the stale length in memmove(). As a result, the source range of that memmove() can extend beyond the end of the reallocated heap buffer, producing a heap out-of-bounds read. This issue has been patched in versions 1.5.1 and 1.6.0."
}
],
"source": {
"advisory": "GHSA-cf8g-hp9m-9fvv",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/62xxx/CVE-2026-62976.json
+94
View File
@@ -0,0 +1,94 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-62976",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-14T22:48:09.780Z",
"datePublished": "2026-11-13T18:39:25.636Z",
"dateUpdated": "2026-11-13T18:39:25.636Z"
},
"containers": {
"cna": {
"title": "BACnet Stack: Consecutive AtomicWriteFile(record-access) appends can trigger a heap out-of-bounds read in the RAMFS file backend",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"lang": "en",
"description": "CWE-125: Out-of-bounds Read",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"references": [
{
"name": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-32jj-x86x-w98w",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-32jj-x86x-w98w"
},
{
"name": "https://github.com/bacnet-stack/bacnet-stack/pull/1408",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/pull/1408"
}
],
"affected": [
{
"vendor": "bacnet-stack",
"product": "bacnet-stack",
"versions": [
{
"version": "< 1.5.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:39:25.636Z"
},
"descriptions": [
{
"lang": "en",
"value": "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.5.1, the RAMFS-backed FILE object implementation stores appended records as NUL-terminated strings, but its record-counting logic later walks the buffer as if an additional terminating empty record were present. As a result, two consecutive AtomicWriteFile(record-access) append requests can cause record_count() to call bacnet_strnlen() on a pointer that is already one byte past the end of the heap allocation. This issue has been patched in versions 1.5.1 and 1.6.0."
}
],
"source": {
"advisory": "GHSA-32jj-x86x-w98w",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/62xxx/CVE-2026-62977.json
+104
View File
@@ -0,0 +1,104 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-62977",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-14T22:48:09.780Z",
"datePublished": "2026-11-13T18:40:09.732Z",
"dateUpdated": "2026-11-13T18:40:09.732Z"
},
"containers": {
"cna": {
"title": "BACnet Stack: `WriteProperty(File_Size)` can bypass read-only protection and expose uninitialized RAMFS tail bytes through `AtomicReadFile`",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"lang": "en",
"description": "CWE-284: Improper Access Control",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-908",
"lang": "en",
"description": "CWE-908: Use of Uninitialized Resource",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"references": [
{
"name": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-mwj7-2v5r-v934",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-mwj7-2v5r-v934"
},
{
"name": "https://github.com/bacnet-stack/bacnet-stack/pull/1411",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/pull/1411"
}
],
"affected": [
{
"vendor": "bacnet-stack",
"product": "bacnet-stack",
"versions": [
{
"version": "< 1.5.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:40:09.732Z"
},
"descriptions": [
{
"lang": "en",
"value": "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.5.1, the BACnet FILE object implementation allows remote WriteProperty(PROP_FILE_SIZE) requests to change the size of a stream-access FILE object without checking whether that FILE is marked Read_Only. When the FILE backend is RAMFS, enlarging the file only performs realloc() and updates the stored size; the newly exposed tail region is not initialized before later reads. As a result, a remote client can enlarge a read-only RAMFS-backed stream-access FILE and then immediately retrieve the newly exposed region with AtomicReadFile(stream-access). Depending on the allocator and build configuration, the returned data may contain sanitizer fill bytes, stale heap contents, or other unintended process memory. Shrinking the file through the same path can also remotely truncate content that was intended to be read-only. This issue has been patched in versions 1.5.1 and 1.6.0."
}
],
"source": {
"advisory": "GHSA-mwj7-2v5r-v934",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/64xxx/CVE-2026-64675.json
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-64675",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-20T17:12:12.891Z",
"datePublished": "2026-11-13T18:51:06.844Z",
"dateUpdated": "2026-11-13T18:51:06.844Z"
},
"containers": {
"cna": {
"title": "BACnet Stack: Pre-auth OOB read in xy_color_decode (BACnetXYColor) via WriteGroup/WriteProperty",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"lang": "en",
"description": "CWE-125: Out-of-bounds Read",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-mmg6-p4pr-cj6h",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-mmg6-p4pr-cj6h"
},
{
"name": "https://github.com/bacnet-stack/bacnet-stack/pull/1386",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/pull/1386"
},
{
"name": "https://github.com/bacnet-stack/bacnet-stack/pull/1387",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/pull/1387"
}
],
"affected": [
{
"vendor": "bacnet-stack",
"product": "bacnet-stack",
"versions": [
{
"version": "< 1.4.5",
"status": "affected"
},
{
"version": "< 1.5.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:51:06.844Z"
},
"descriptions": [
{
"lang": "en",
"value": "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5 and 1.5.1, a single unauthenticated BACnet/IP UDP datagram (port 47808) triggers an out-of-bounds read in xy_color_decode() (src/bacnet/lighting.c), reachable pre-authentication through two default-registered service handlers: the UnconfirmedRequest WriteGroup service (0x0A) and Confirmed WriteProperty on a BACnetXYColor-typed property. This issue has been patched in versions 1.4.5, 1.5.1, and 1.6.0."
}
],
"source": {
"advisory": "GHSA-mmg6-p4pr-cj6h",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/65xxx/CVE-2026-65843.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-22T23:16:47.753Z",
"datePublished": "2026-11-11T18:29:55.356Z",
"dateUpdated": "2026-11-11T18:29:55.356Z"
"dateUpdated": "2026-11-13T18:45:03.920Z"
},
"containers": {
"cna": {
@@ -89,6 +89,40 @@
"advisory": "GHSA-2x86-cf3f-86gw",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:43:10.749587Z",
"id": "CVE-2026-65843",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:45:03.920Z"
}
}
]
}
}
data/2026/65xxx/CVE-2026-65971.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-23T18:15:14.580Z",
"datePublished": "2026-11-11T21:49:12.607Z",
"dateUpdated": "2026-11-11T21:49:12.607Z"
"dateUpdated": "2026-11-13T18:17:27.998Z"
},
"containers": {
"cna": {
@@ -93,6 +93,48 @@
"advisory": "GHSA-7fgc-3h6c-698r",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/Power-Components/livewire-powergrid/security/advisories/GHSA-7fgc-3h6c-698r",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:14:36.111855Z",
"id": "CVE-2026-65971",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:17:27.998Z"
}
}
]
}
}
data/2026/67xxx/CVE-2026-67444.json
+111
View File
@@ -0,0 +1,111 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-67444",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-29T15:07:24.992Z",
"datePublished": "2026-11-13T19:02:04.830Z",
"dateUpdated": "2026-11-13T19:02:04.830Z"
},
"containers": {
"cna": {
"title": "Hubleys: Stored XSS via unrestricted background-image upload, served with an attacker-chosen Content-Type and no CSP protection",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"lang": "en",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-434",
"lang": "en",
"description": "CWE-434: Unrestricted Upload of File with Dangerous Type",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"references": [
{
"name": "https://github.com/knrdl/hubleys-dashboard/security/advisories/GHSA-j2w9-hhqw-mrq8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/knrdl/hubleys-dashboard/security/advisories/GHSA-j2w9-hhqw-mrq8"
},
{
"name": "https://github.com/knrdl/hubleys-dashboard/commit/5a7f04c153295d48319d35fdd53e30f50288cd37",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/knrdl/hubleys-dashboard/commit/5a7f04c153295d48319d35fdd53e30f50288cd37"
},
{
"name": "https://github.com/knrdl/hubleys-dashboard/releases/tag/v0.5.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/knrdl/hubleys-dashboard/releases/tag/v0.5.2"
}
],
"affected": [
{
"vendor": "knrdl",
"product": "hubleys-dashboard",
"versions": [
{
"version": "< 0.5.2",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:02:04.830Z"
},
"descriptions": [
{
"lang": "en",
"value": "Hubleys is a dashboard for self-hosted services. Prior to version 0.5.2, any authenticated (non-admin) Hubleys user can upload a file with an arbitrary extension as their dashboard \"background image,\" and the server will later serve that file back with a Content-Type derived straight from the attacker's chosen extension - so uploading an .html file gets it served as text/html. Because the endpoint that serves it returns a manually-constructed response rather than going through SvelteKit's normal page-rendering pipeline, the app's configured Content-Security-Policy never gets attached to it either, so a script embedded in the upload runs unrestricted. This issue has been patched in version 0.5.2."
}
],
"source": {
"advisory": "GHSA-j2w9-hhqw-mrq8",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/68xxx/CVE-2026-68507.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-30T16:19:08.081Z",
"datePublished": "2026-11-11T20:57:49.243Z",
"dateUpdated": "2026-11-11T20:57:49.243Z"
"dateUpdated": "2026-11-13T18:47:46.937Z"
},
"containers": {
"cna": {
@@ -99,6 +99,48 @@
"advisory": "GHSA-vpc2-r395-534p",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/3xpyth0n/ideon/security/advisories/GHSA-vpc2-r395-534p",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:47:26.116842Z",
"id": "CVE-2026-68507",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:47:46.937Z"
}
}
]
}
}
data/2026/68xxx/CVE-2026-68510.json
+94
View File
@@ -0,0 +1,94 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-68510",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-30T16:19:08.081Z",
"datePublished": "2026-11-13T18:57:19.508Z",
"dateUpdated": "2026-11-13T18:57:19.508Z"
},
"containers": {
"cna": {
"title": "bit-vec: unsoundness arising with `deserialize` then `get_unchecked`",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"lang": "en",
"description": "CWE-20: Improper Input Validation",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"references": [
{
"name": "https://github.com/contain-rs/bit-vec/security/advisories/GHSA-h4f4-f333-vh4h",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/contain-rs/bit-vec/security/advisories/GHSA-h4f4-f333-vh4h"
},
{
"name": "https://github.com/contain-rs/bit-vec/pull/149",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/contain-rs/bit-vec/pull/149"
}
],
"affected": [
{
"vendor": "contain-rs",
"product": "bit-vec",
"versions": [
{
"version": "< 0.10.0",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:57:19.508Z"
},
"descriptions": [
{
"lang": "en",
"value": "bit-vec is a compact vector of bits. Prior to version 0.10.0, there is undefined behavior if a user performs deserialize from an untrusted source and unsafe get_unchecked. A user of this library may be impacted by incorrect behavior if they perform deserialize from an untrusted source and run operations on the deserialized BitVec. This issue has been patched in version 0.10.0."
}
],
"source": {
"advisory": "GHSA-h4f4-f333-vh4h",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/68xxx/CVE-2026-68511.json
+44 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-30T16:19:08.082Z",
"datePublished": "2026-11-11T21:56:59.654Z",
"dateUpdated": "2026-11-11T21:56:59.654Z"
"dateUpdated": "2026-11-13T18:20:33.448Z"
},
"containers": {
"cna": {
@@ -89,6 +89,48 @@
"advisory": "GHSA-xh42-5mjw-2f4v",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/WardPearce/paaster/security/advisories/GHSA-xh42-5mjw-2f4v",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:19:46.265655Z",
"id": "CVE-2026-68511",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:20:33.448Z"
}
}
]
}
}
data/2026/68xxx/CVE-2026-68540.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-30T19:56:44.101Z",
"datePublished": "2026-11-11T22:12:33.400Z",
"dateUpdated": "2026-11-11T22:12:33.400Z"
"dateUpdated": "2026-11-13T18:24:48.118Z"
},
"containers": {
"cna": {
@@ -110,6 +110,40 @@
"advisory": "GHSA-v8x5-rchq-jr47",
"discovery": "UNKNOWN"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:23:22.658791Z",
"id": "CVE-2026-68540",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:24:48.118Z"
}
}
]
}
}
data/2026/68xxx/CVE-2026-68541.json
+111
View File
@@ -0,0 +1,111 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-68541",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-30T19:56:44.101Z",
"datePublished": "2026-11-13T19:05:46.506Z",
"dateUpdated": "2026-11-13T19:05:46.506Z"
},
"containers": {
"cna": {
"title": "PolicyPress: Sensitive content disclosed via CSS-only web redaction and insecure starter workflow defaults",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"lang": "en",
"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-390",
"lang": "en",
"description": "CWE-390: Detection of Error Condition Without Action",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"references": [
{
"name": "https://github.com/sc2in/PolicyPress/security/advisories/GHSA-j557-r6p7-8r3m",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/sc2in/PolicyPress/security/advisories/GHSA-j557-r6p7-8r3m"
},
{
"name": "https://github.com/sc2in/PolicyPress/commit/131de241014c17c30130d83151da840d005d55d8",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sc2in/PolicyPress/commit/131de241014c17c30130d83151da840d005d55d8"
},
{
"name": "https://github.com/sc2in/PolicyPress/releases/tag/v1.4.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/sc2in/PolicyPress/releases/tag/v1.4.1"
}
],
"affected": [
{
"vendor": "sc2in",
"product": "PolicyPress",
"versions": [
{
"version": "< 1.4.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:05:46.506Z"
},
"descriptions": [
{
"lang": "en",
"value": "PolicyPress is a compliance policy management tool for small and mid-size teams. Prior to version 1.4.1, sensitive content is disclosed via CSS-only web redaction and insecure starter workflow defaults. This issue has been patched in version 1.4.1."
}
],
"source": {
"advisory": "GHSA-j557-r6p7-8r3m",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/68xxx/CVE-2026-68551.json
+118
View File
@@ -0,0 +1,118 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-68551",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-07-30T19:56:44.102Z",
"datePublished": "2026-11-13T19:14:35.246Z",
"dateUpdated": "2026-11-13T19:14:35.246Z"
},
"containers": {
"cna": {
"title": "Budget Board's OIDC login links to an existing local account by email alone, with no email_verified check, enabling account takeover of pre-existing users",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"lang": "en",
"description": "CWE-287: Improper Authentication",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-345",
"lang": "en",
"description": "CWE-345: Insufficient Verification of Data Authenticity",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"references": [
{
"name": "https://github.com/teelur/budget-board/security/advisories/GHSA-576g-r8m3-q9vp",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/teelur/budget-board/security/advisories/GHSA-576g-r8m3-q9vp"
},
{
"name": "https://github.com/teelur/budget-board/pull/956",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/teelur/budget-board/pull/956"
},
{
"name": "https://github.com/teelur/budget-board/commit/8c050368e6a01c72f41ab39be913fbf95f1cb253",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/teelur/budget-board/commit/8c050368e6a01c72f41ab39be913fbf95f1cb253"
},
{
"name": "https://github.com/teelur/budget-board/releases/tag/v3.6.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/teelur/budget-board/releases/tag/v3.6.2"
}
],
"affected": [
{
"vendor": "teelur",
"product": "budget-board",
"versions": [
{
"version": "< 3.6.2",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T19:14:35.246Z"
},
"descriptions": [
{
"lang": "en",
"value": "Budget Board is an app for tracking monthly spending and working towards financial goals. Prior to version 3.6.2, Budget Board's OIDC login flow finds and signs into an existing local account purely by matching the email address asserted in the identity provider's token - it never checks the standard email_verified claim. If the configured OIDC provider ever allows a user to register or display an email address without proving they own it , an attacker can register there using a victim's email and get signed into the victim's existing Budget Board account - including all their linked bank data. This issue has been patched in version 3.6.2."
}
],
"source": {
"advisory": "GHSA-576g-r8m3-q9vp",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/71xxx/CVE-2026-71363.json
+36 -2
View File
@@ -8,7 +8,7 @@
"assignerShortName": "redhat",
"dateReserved": "2026-08-06T04:27:34.372Z",
"datePublished": "2026-11-12T17:19:27.585Z",
"dateUpdated": "2026-11-12T17:19:27.585Z"
"dateUpdated": "2026-11-13T18:56:05.898Z"
},
"containers": {
"cna": {
@@ -136,6 +136,40 @@
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-11-13T18:54:43.688981Z",
"id": "CVE-2026-71363",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-11-13T18:56:05.898Z"
}
}
]
}
}
data/2026/82xxx/CVE-2026-82414.json
+99
View File
@@ -0,0 +1,99 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-82414",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-08-28T22:00:43.514Z",
"datePublished": "2026-11-13T18:40:31.749Z",
"dateUpdated": "2026-11-13T18:40:31.749Z"
},
"containers": {
"cna": {
"title": "BACnet Stack: MS/TP COBS decode overflow",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"lang": "en",
"description": "CWE-787: Out-of-bounds Write",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-8456-m9x4-j6mc",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-8456-m9x4-j6mc"
},
{
"name": "https://github.com/bacnet-stack/bacnet-stack/pull/1425",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/pull/1425"
}
],
"affected": [
{
"vendor": "bacnet-stack",
"product": "bacnet-stack",
"versions": [
{
"version": ">= 1.4.0, < 1.4.6",
"status": "affected"
},
{
"version": ">= 1.5.0, < 1.5.1",
"status": "affected"
},
{
"version": ">= 1.6.0, < 1.6.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:40:31.749Z"
},
"descriptions": [
{
"lang": "en",
"value": "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.6, 1.5.0 to before 1.5.1, and 1.6.0 to before 1.6.1, the BACnet MS/TP receive path decodes COBS frames into an output pointer inside the same fixed input buffer, but passes the full input-buffer size as the decode capacity. A long valid COBS payload can therefore write past the end of the actual remaining buffer. This issue has been patched in versions 1.4.6, 1.5.1, 1.6.1, and 1.7.0."
}
],
"source": {
"advisory": "GHSA-8456-m9x4-j6mc",
"discovery": "UNKNOWN"
}
}
}
}
data/2026/97xxx/CVE-2026-97692.json
+99
View File
@@ -0,0 +1,99 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-97692",
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"state": "PUBLISHED",
"assignerShortName": "GitHub_M",
"dateReserved": "2026-09-24T21:43:37.208Z",
"datePublished": "2026-11-13T18:42:41.703Z",
"dateUpdated": "2026-11-13T18:42:41.703Z"
},
"containers": {
"cna": {
"title": "BACnet Stack: pre-auth out-of-bounds read that escalates to an out-of-bounds write into global memory",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"lang": "en",
"description": "CWE-787: Out-of-bounds Write",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
}
}
],
"references": [
{
"name": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-gr74-333w-7wg8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-gr74-333w-7wg8"
},
{
"name": "https://github.com/bacnet-stack/bacnet-stack/pull/1435",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bacnet-stack/bacnet-stack/pull/1435"
}
],
"affected": [
{
"vendor": "bacnet-stack",
"product": "bacnet-stack",
"versions": [
{
"version": "< 1.4.6",
"status": "affected"
},
{
"version": ">= 1.5.0, < 1.5.2",
"status": "affected"
},
{
"version": ">= 1.6.0, < 1.6.1",
"status": "affected"
}
]
}
],
"providerMetadata": {
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M",
"dateUpdated": "2026-11-13T18:42:41.703Z"
},
"descriptions": [
{
"lang": "en",
"value": "BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, the BACnet/SC message decoder walks the header-option list by following each option's MORE bit. Nothing rejects a list whose last option still has the MORE bit set, and the decode walk has no upper bound on how many options it processes. A single crafted BVLC-SC frame makes the walk advance one option past the end of the message and read message[message_len], one byte out of bounds. When the bytes after the message carry more MORE-set option markers, the walk keeps going: it runs past the fixed 4-entry option array and writes decoded option fields out of bounds. On the server that decode array is the static global bsc_dm, so the out-of-bounds write lands in adjacent BSS. Both faults are reachable before authentication, from the first frame a peer sends on a BACnet/SC connection, and the bytes that follow the message are the same peer's prior-frame data. This issue has been patched in versions 1.4.6, 1.5.2, 1.6.1, and 1.7.0."
}
],
"source": {
"advisory": "GHSA-gr74-333w-7wg8",
"discovery": "UNKNOWN"
}
}
}
}
data/delta.json
+12 -6618
View File
File diff suppressed because it is too large. Load diff
Loaded 100 of 102 files, more files were not shown because too many files have changed in this diff. Show more