From bc2215a04cadd761269df733c8a226a98c39e767 Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Sun, 15 Nov 2026 11:30:27 +0100 Subject: [PATCH] CVE sync 2026-11-15T10:30:22Z --- data/2026/129xxx/CVE-2026-129349.json | 142 ++++++++++++++++ data/2026/129xxx/CVE-2026-129445.json | 172 +++++++++++++++++++ data/2026/82xxx/CVE-2026-82568.json | 106 ++++++++++++ data/2026/82xxx/CVE-2026-82663.json | 106 ++++++++++++ data/delta.json | 21 ++- data/deltaLog.json | 230 ++++++-------------------- state/sync.json | 6 +- 7 files changed, 598 insertions(+), 185 deletions(-) create mode 100644 data/2026/129xxx/CVE-2026-129349.json create mode 100644 data/2026/129xxx/CVE-2026-129445.json create mode 100644 data/2026/82xxx/CVE-2026-82568.json create mode 100644 data/2026/82xxx/CVE-2026-82663.json diff --git a/data/2026/129xxx/CVE-2026-129349.json b/data/2026/129xxx/CVE-2026-129349.json new file mode 100644 index 0000000000..9709279693 --- /dev/null +++ b/data/2026/129xxx/CVE-2026-129349.json @@ -0,0 +1,142 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-129349", + "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", + "state": "PUBLISHED", + "assignerShortName": "apache", + "dateReserved": "2026-11-14T05:29:36.745Z", + "datePublished": "2026-11-15T09:31:50.485Z", + "dateUpdated": "2026-11-15T10:09:36.382Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", + "shortName": "apache", + "dateUpdated": "2026-11-15T09:31:50.485Z" + }, + "title": "Apache Shiro: DefaultLdapRealm accepts any password when authentication caching is enabled", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-287 Improper Authentication", + "lang": "en", + "cweId": "CWE-287", + "type": "CWE" + } + ] + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "affected": [ + { + "vendor": "Apache Software Foundation", + "product": "Apache Shiro", + "collectionURL": "https://repo.maven.apache.org/maven2", + "packageName": "org.apache.shiro:shiro-core", + "packageURL": "pkg:maven/org.apache.shiro/shiro-core", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "3.0.1", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "value": "When authentication caching is enabled on DefaultLdapRealm, after a user logs in successfully once, subsequent logins for that user succeed with any password.\nA cached authentication skips the LDAP bind, and the AllowAllCredentialsMatcher installed by default in DefaultLdapRealm accepts any credentials, allowing an attacker who knows a valid username to authenticate as that user.\nThis issue affects all Apache Shiro versions through 3.0.0, only when using DefaultLdapRealm (or JndiLdapRealm) with authenticationCachingEnabled set to true, which is not the default.\n\nMitigation: Upgrade to version 3.0.1 or later, which fixes the issue by no longer installing AllowAllCredentialsMatcher by default.\nAlternatively, disable authentication caching on the LDAP realm (this is the default), or configure a credentials matcher, such as SimpleCredentialsMatcher, that verifies credentials against the cached authentication info.", + "lang": "en", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "When authentication caching is enabled on DefaultLdapRealm, after a user logs in successfully once, subsequent logins for that user succeed with any password.
A cached authentication skips the LDAP bind, and the AllowAllCredentialsMatcher installed by default in DefaultLdapRealm accepts any credentials, allowing an attacker who knows a valid username to authenticate as that user.
This issue affects all Apache Shiro versions through 3.0.0, only when using DefaultLdapRealm (or JndiLdapRealm) with authenticationCachingEnabled set to true, which is not the default.

Mitigation: Upgrade to version 3.0.1 or later, which fixes the issue by no longer installing AllowAllCredentialsMatcher by default.
Alternatively, disable authentication caching on the LDAP realm (this is the default), or configure a credentials matcher, such as SimpleCredentialsMatcher, that verifies credentials against the cached authentication info." + } + ] + } + ], + "references": [ + { + "url": "https://lists.apache.org/thread.html/1whn52ht402lhc782c3s843c9hho8b4y", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "format": "CVSS", + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NEGLIGIBLE", + "Automatable": "YES", + "Recovery": "USER", + "valueDensity": "CONCENTRATED", + "vulnerabilityResponseEffort": "LOW", + "providerUrgency": "RED", + "version": "4.0", + "baseSeverity": "CRITICAL", + "baseScore": 9.1, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:C/RE:L/U:Red" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Joshua Rogers", + "type": "finder" + }, + { + "lang": "en", + "value": "Lenny Primak ", + "type": "remediation developer" + } + ], + "x_generator": { + "engine": "Vulnogram 1.0.3" + } + }, + "adp": [ + { + "title": "CVE Program Container", + "references": [ + { + "url": "http://www.openwall.com/lists/oss-security/2026/11/14/8" + } + ], + "providerMetadata": { + "orgId": "af854a3a-2127-422b-91ae-364da2661108", + "shortName": "CVE", + "dateUpdated": "2026-11-15T10:09:36.382Z" + } + } + ] + } +} \ No newline at end of file diff --git a/data/2026/129xxx/CVE-2026-129445.json b/data/2026/129xxx/CVE-2026-129445.json new file mode 100644 index 0000000000..f78ecabf9e --- /dev/null +++ b/data/2026/129xxx/CVE-2026-129445.json @@ -0,0 +1,172 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-129445", + "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "state": "PUBLISHED", + "assignerShortName": "VulDB", + "dateReserved": "2026-11-14T16:58:31.731Z", + "datePublished": "2026-11-15T10:00:30.670Z", + "dateUpdated": "2026-11-15T10:00:30.670Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "shortName": "VulDB", + "dateUpdated": "2026-11-15T10:00:30.670Z" + }, + "title": "D-Link DIR-850L Console Login consolepwd hard-coded credentials", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-798", + "lang": "en", + "description": "Hard-coded Credentials" + } + ] + }, + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-259", + "lang": "en", + "description": "Use of Hard-coded Password" + } + ] + } + ], + "affected": [ + { + "vendor": "D-Link", + "product": "DIR-850L", + "versions": [ + { + "version": "FW1.20WWb03", + "status": "affected" + } + ], + "cpes": [ + "cpe:2.3:h:d-link:dir-850l:*:*:*:*:*:*:*:*" + ], + "modules": [ + "Console Login" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A security flaw has been discovered in D-Link DIR-850L FW1.20WWb03. This impacts an unknown function of the file /usr/sbin/consolepwd of the component Console Login. Performing a manipulation results in hard-coded credentials. The attack requires a local approach. The exploit has been released to the public and may be used for attacks." + } + ], + "metrics": [ + { + "cvssV4_0": { + "version": "4.0", + "baseScore": 9.3, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P", + "baseSeverity": "CRITICAL" + } + }, + { + "cvssV3_1": { + "version": "3.1", + "baseScore": 8.2, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C", + "baseSeverity": "HIGH" + } + }, + { + "cvssV3_0": { + "version": "3.0", + "baseScore": 8.2, + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C", + "baseSeverity": "HIGH" + } + }, + { + "cvssV2_0": { + "version": "2.0", + "baseScore": 6.5, + "vectorString": "AV:L/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:C" + } + } + ], + "timeline": [ + { + "time": "2026-11-14T00:00:00.000Z", + "lang": "en", + "value": "Advisory disclosed" + }, + { + "time": "2026-11-14T01:00:00.000Z", + "lang": "en", + "value": "VulDB entry created" + }, + { + "time": "2026-11-14T18:03:38.000Z", + "lang": "en", + "value": "VulDB entry last update" + } + ], + "credits": [ + { + "lang": "en", + "value": "BenSmith (VulDB User)", + "type": "reporter" + } + ], + "references": [ + { + "url": "https://vuldb.com/vuln/437458", + "name": "VDB-437458 | D-Link DIR-850L Console Login consolepwd hard-coded credentials", + "tags": [ + "vdb-entry" + ] + }, + { + "url": "https://vuldb.com/vuln/437458/cti", + "name": "VDB-437458 | CTI Indicators (IOB, IOC, TTP, IOA)", + "tags": [ + "signature", + "permissions-required" + ] + }, + { + "url": "https://vuldb.com/cve/CVE-2026-129445", + "name": "CVE-2026-129445 | CVE Analysis and Report", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://vuldb.com/submit/1044944", + "name": "Submit #1044944 | D-Link DIR-850L Rev.A Wi-Fi router FW1.20WWb03 Hard-coded Credentials", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://github.com/XueDugu/dlink-dir850l-consolepwd-evidence", + "tags": [ + "exploit" + ] + }, + { + "url": "https://www.dlink.com/", + "tags": [ + "product" + ] + } + ], + "x_generator": [ + "VulDB PVTS v202611" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/82xxx/CVE-2026-82568.json b/data/2026/82xxx/CVE-2026-82568.json new file mode 100644 index 0000000000..009e78861b --- /dev/null +++ b/data/2026/82xxx/CVE-2026-82568.json @@ -0,0 +1,106 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-82568", + "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "state": "PUBLISHED", + "assignerShortName": "Wordfence", + "dateReserved": "2026-08-30T02:26:06.234Z", + "datePublished": "2026-11-15T09:34:45.651Z", + "dateUpdated": "2026-11-15T09:34:45.651Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "shortName": "Wordfence", + "dateUpdated": "2026-11-15T09:34:45.651Z" + }, + "affected": [ + { + "vendor": "GiveWP", + "product": "Give - Peer-to-Peer", + "versions": [ + { + "version": "0", + "status": "affected", + "lessThanOrEqual": "2.9.3", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Give - Peer-to-Peer plugin for WordPress is vulnerable to time-based SQL Injection via the 'sort' parameter in all versions up to, and including, 2.9.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Successful exploitation requires the existence of at least one Peer-to-Peer campaign. This vulnerability can be combined with CVE-2026-82663 to achieve unauthenticated remote code execution." + } + ], + "title": "Give - Peer-to-Peer <= 2.9.3 - Unauthenticated SQL Injection via 'sort' Parameter", + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8b68d24c-a963-4316-a8f3-8dc6a494e016?source=cve" + }, + { + "url": "https://givewp.com/addons/peer-to-peer/" + }, + { + "url": "https://docs.nexcess.com/software/changelogs/give/give-peer-to-peer/" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command", + "cweId": "CWE-89", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH" + } + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "Alex Thomas" + }, + { + "lang": "en", + "type": "finder", + "value": "Wordfence Argus" + } + ], + "timeline": [ + { + "time": "2026-08-28T00:00:00.000Z", + "lang": "en", + "value": "Discovered" + }, + { + "time": "2026-09-02T19:59:14.000Z", + "lang": "en", + "value": "Vendor Notified" + }, + { + "time": "2026-11-14T20:39:42.000Z", + "lang": "en", + "value": "Disclosed" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/82xxx/CVE-2026-82663.json b/data/2026/82xxx/CVE-2026-82663.json new file mode 100644 index 0000000000..72449b037e --- /dev/null +++ b/data/2026/82xxx/CVE-2026-82663.json @@ -0,0 +1,106 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-82663", + "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "state": "PUBLISHED", + "assignerShortName": "Wordfence", + "dateReserved": "2026-08-30T14:28:48.212Z", + "datePublished": "2026-11-15T09:34:46.242Z", + "dateUpdated": "2026-11-15T09:34:46.242Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "shortName": "Wordfence", + "dateUpdated": "2026-11-15T09:34:46.242Z" + }, + "affected": [ + { + "vendor": "GiveWP", + "product": "Give - Peer-to-Peer", + "versions": [ + { + "version": "0", + "status": "affected", + "lessThanOrEqual": "2.9.5", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Give - Peer-to-Peer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers who know or discover an existing campaign and team ID to modify the team's name, story, goal, access and notification settings, set its profile image URL, and upload WordPress-allowed media files as parentless attachments. This vulnerability can be combined with CVE-2026-82568 to achieve unauthenticated remote code execution." + } + ], + "title": "Give - Peer-to-Peer <= 2.9.5 - Authorization Bypass to Team Modification and Media Upload", + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f424258a-367d-43cb-b66b-1f898391a0ea?source=cve" + }, + { + "url": "https://givewp.com/addons/peer-to-peer/" + }, + { + "url": "https://docs.nexcess.com/software/changelogs/give/give-peer-to-peer/" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-863 Incorrect Authorization", + "cweId": "CWE-863", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH" + } + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "Alex Thomas" + }, + { + "lang": "en", + "type": "finder", + "value": "Wordfence Argus" + } + ], + "timeline": [ + { + "time": "2026-08-28T00:00:00.000Z", + "lang": "en", + "value": "Discovered" + }, + { + "time": "2026-09-02T19:59:14.000Z", + "lang": "en", + "value": "Vendor Notified" + }, + { + "time": "2026-11-14T20:40:21.000Z", + "lang": "en", + "value": "Disclosed" + } + ] + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index 345734e136..284228a1f3 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,14 +1,21 @@ { - "fetchTime": "2026-11-15T08:19:23.136Z", - "numberOfChanges": 1, + "fetchTime": "2026-11-15T10:12:31.708Z", + "numberOfChanges": 2, "new": [ { - "cveId": "CVE-2026-129444", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129444", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129444.json", - "dateUpdated": "2026-11-15T08:15:18.180Z" + "cveId": "CVE-2026-129445", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129445", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129445.json", + "dateUpdated": "2026-11-15T10:00:30.670Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-129349", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129349", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129349.json", + "dateUpdated": "2026-11-15T10:09:36.382Z" } ], - "updated": [], "error": [] } \ No newline at end of file diff --git a/data/deltaLog.json b/data/deltaLog.json index 61de9743f3..ba61d504e2 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,59 @@ [ + { + "fetchTime": "2026-11-15T10:12:31.708Z", + "numberOfChanges": 2, + "new": [ + { + "cveId": "CVE-2026-129445", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129445", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129445.json", + "dateUpdated": "2026-11-15T10:00:30.670Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-129349", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129349", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129349.json", + "dateUpdated": "2026-11-15T10:09:36.382Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-15T09:38:04.105Z", + "numberOfChanges": 2, + "new": [ + { + "cveId": "CVE-2026-82568", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82568", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82568.json", + "dateUpdated": "2026-11-15T09:34:45.651Z" + }, + { + "cveId": "CVE-2026-82663", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82663", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82663.json", + "dateUpdated": "2026-11-15T09:34:46.242Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-15T09:31:52.151Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-129349", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129349", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129349.json", + "dateUpdated": "2026-11-15T09:31:50.485Z" + } + ], + "updated": [], + "error": [] + }, { "fetchTime": "2026-11-15T08:19:23.136Z", "numberOfChanges": 1, @@ -718422,180 +718477,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-16T09:55:10.329Z", - "numberOfChanges": 1, - "new": [ - { - "cveId": "CVE-2026-14452", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-14452", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14452.json", - "dateUpdated": "2026-10-16T09:51:30.453Z" - } - ], - "updated": [], - "error": [] - }, - { - "fetchTime": "2026-10-16T09:47:46.713Z", - "numberOfChanges": 6, - "new": [ - { - "cveId": "CVE-2026-106030", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106030", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106030.json", - "dateUpdated": "2026-10-16T09:47:20.977Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-101295", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101295", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101295.json", - "dateUpdated": "2026-10-16T09:46:39.775Z" - }, - { - "cveId": "CVE-2026-103754", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103754", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103754.json", - "dateUpdated": "2026-10-16T09:46:45.990Z" - }, - { - "cveId": "CVE-2026-106033", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106033", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106033.json", - "dateUpdated": "2026-10-16T09:46:48.138Z" - }, - { - "cveId": "CVE-2026-108334", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108334", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108334.json", - "dateUpdated": "2026-10-16T09:44:13.686Z" - }, - { - "cveId": "CVE-2026-110777", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110777", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110777.json", - "dateUpdated": "2026-10-16T09:47:27.217Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-16T09:37:16.161Z", - "numberOfChanges": 3, - "new": [ - { - "cveId": "CVE-2026-107649", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107649", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107649.json", - "dateUpdated": "2026-10-16T09:26:38.264Z" - }, - { - "cveId": "CVE-2026-110703", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110703", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110703.json", - "dateUpdated": "2026-10-16T09:26:37.351Z" - }, - { - "cveId": "CVE-2026-96768", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96768", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96768.json", - "dateUpdated": "2026-10-16T09:26:36.859Z" - } - ], - "updated": [], - "error": [] - }, - { - "fetchTime": "2026-10-16T08:57:18.396Z", - "numberOfChanges": 1, - "new": [ - { - "cveId": "CVE-2026-101300", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101300", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101300.json", - "dateUpdated": "2026-10-16T08:56:02.923Z" - } - ], - "updated": [], - "error": [] - }, - { - "fetchTime": "2026-10-16T08:48:15.474Z", - "numberOfChanges": 3, - "new": [ - { - "cveId": "CVE-2026-111472", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111472", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111472.json", - "dateUpdated": "2026-10-16T08:37:34.959Z" - }, - { - "cveId": "CVE-2026-15219", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-15219", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15219.json", - "dateUpdated": "2026-10-16T08:42:32.579Z" - }, - { - "cveId": "CVE-2026-15575", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-15575", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15575.json", - "dateUpdated": "2026-10-16T08:45:41.731Z" - } - ], - "updated": [], - "error": [] - }, - { - "fetchTime": "2026-10-16T08:31:00.554Z", - "numberOfChanges": 7, - "new": [ - { - "cveId": "CVE-2026-104003", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104003", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104003.json", - "dateUpdated": "2026-10-16T08:27:43.226Z" - }, - { - "cveId": "CVE-2026-104726", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104726", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104726.json", - "dateUpdated": "2026-10-16T08:27:42.514Z" - }, - { - "cveId": "CVE-2026-109224", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109224", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109224.json", - "dateUpdated": "2026-10-16T08:27:42.175Z" - }, - { - "cveId": "CVE-2026-111311", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111311", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111311.json", - "dateUpdated": "2026-10-16T08:27:40.819Z" - }, - { - "cveId": "CVE-2026-14177", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-14177", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14177.json", - "dateUpdated": "2026-10-16T08:13:48.769Z" - }, - { - "cveId": "CVE-2026-92766", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92766", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92766.json", - "dateUpdated": "2026-10-16T08:27:42.866Z" - }, - { - "cveId": "CVE-2026-93681", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93681", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93681.json", - "dateUpdated": "2026-10-16T08:27:41.284Z" - } - ], - "updated": [], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index c992ece148..43bfa8c89d 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "c8095997fb2232a992282d7f0b48464983604854", + "upstream_commit": "a26cfdb2be83f3077db1764fb5366af38e99481f", "since_year": 2017, - "records": 332639, - "synced_at_utc": "2026-11-15T09:25:10.021239+00:00" + "records": 332643, + "synced_at_utc": "2026-11-15T10:25:26.663233+00:00" }