CVE sync 2026-11-11T01:40:20Z
This commit is contained in:
Vulnerability Bot
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "PSF",
|
||||
"dateReserved": "2026-10-23T14:12:50.150Z",
|
||||
"datePublished": "2026-11-10T16:33:49.360Z",
|
||||
"dateUpdated": "2026-11-10T17:25:02.503Z"
|
||||
"dateUpdated": "2026-11-11T00:11:26.551Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -181,6 +181,19 @@
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-10T17:25:02.503Z"
|
||||
}
|
||||
},
|
||||
{
|
||||
"title": "CVE Program Container",
|
||||
"references": [
|
||||
{
|
||||
"url": "http://www.openwall.com/lists/oss-security/2026/11/10/30"
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"shortName": "CVE",
|
||||
"dateUpdated": "2026-11-11T00:11:26.551Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-03T18:52:08.480Z",
|
||||
"datePublished": "2026-11-10T18:23:57.697Z",
|
||||
"dateUpdated": "2026-11-10T23:55:31.861Z"
|
||||
"dateUpdated": "2026-11-11T01:09:50.866Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:38:26.556767Z",
|
||||
"id": "CVE-2026-121670",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:09:50.866Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-03T18:52:08.481Z",
|
||||
"datePublished": "2026-11-10T18:23:58.306Z",
|
||||
"dateUpdated": "2026-11-10T23:55:32.383Z"
|
||||
"dateUpdated": "2026-11-11T01:09:34.845Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -317,6 +317,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:38:21.321717Z",
|
||||
"id": "CVE-2026-121671",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:09:34.845Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-03T18:52:08.481Z",
|
||||
"datePublished": "2026-11-10T18:23:58.746Z",
|
||||
"dateUpdated": "2026-11-10T23:55:32.965Z"
|
||||
"dateUpdated": "2026-11-11T01:09:19.416Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:38:15.980679Z",
|
||||
"id": "CVE-2026-121673",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:09:19.416Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-03T18:52:08.481Z",
|
||||
"datePublished": "2026-11-10T18:24:01.860Z",
|
||||
"dateUpdated": "2026-11-10T23:55:36.172Z"
|
||||
"dateUpdated": "2026-11-11T01:09:03.865Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -208,6 +208,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:38:10.686829Z",
|
||||
"id": "CVE-2026-121681",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:09:03.865Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-04T19:07:32.304Z",
|
||||
"datePublished": "2026-11-10T18:24:04.043Z",
|
||||
"dateUpdated": "2026-11-10T23:55:38.324Z"
|
||||
"dateUpdated": "2026-11-11T01:08:48.379Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:38:05.361844Z",
|
||||
"id": "CVE-2026-122165",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:08:48.379Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-04T19:07:32.304Z",
|
||||
"datePublished": "2026-11-10T18:24:04.583Z",
|
||||
"dateUpdated": "2026-11-10T23:55:38.838Z"
|
||||
"dateUpdated": "2026-11-11T01:08:32.398Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:37:59.506865Z",
|
||||
"id": "CVE-2026-122166",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:08:32.398Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-04T19:07:32.304Z",
|
||||
"datePublished": "2026-11-10T18:24:05.590Z",
|
||||
"dateUpdated": "2026-11-10T23:55:39.887Z"
|
||||
"dateUpdated": "2026-11-11T01:08:16.434Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:37:53.710593Z",
|
||||
"id": "CVE-2026-122168",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:08:16.434Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-04T19:07:32.305Z",
|
||||
"datePublished": "2026-11-10T18:24:06.627Z",
|
||||
"dateUpdated": "2026-11-10T23:55:40.999Z"
|
||||
"dateUpdated": "2026-11-11T01:08:00.948Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -451,6 +451,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:37:48.006668Z",
|
||||
"id": "CVE-2026-122170",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:08:00.948Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-04T19:07:32.305Z",
|
||||
"datePublished": "2026-11-10T18:24:07.959Z",
|
||||
"dateUpdated": "2026-11-10T23:55:44.169Z"
|
||||
"dateUpdated": "2026-11-11T01:07:45.463Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -451,6 +451,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:37:42.494770Z",
|
||||
"id": "CVE-2026-122172",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:07:45.463Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-04T19:07:32.305Z",
|
||||
"datePublished": "2026-11-10T18:24:09.239Z",
|
||||
"dateUpdated": "2026-11-10T23:55:45.117Z"
|
||||
"dateUpdated": "2026-11-11T01:07:30.058Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:37:36.700480Z",
|
||||
"id": "CVE-2026-122174",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:07:30.058Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-04T19:07:32.305Z",
|
||||
"datePublished": "2026-11-10T18:24:09.797Z",
|
||||
"dateUpdated": "2026-11-10T23:55:45.544Z"
|
||||
"dateUpdated": "2026-11-11T01:07:14.575Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -100,6 +100,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:37:31.557365Z",
|
||||
"id": "CVE-2026-122175",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:07:14.575Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-04T19:07:32.305Z",
|
||||
"datePublished": "2026-11-10T18:24:11.475Z",
|
||||
"dateUpdated": "2026-11-10T23:55:47.089Z"
|
||||
"dateUpdated": "2026-11-11T01:06:58.388Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:37:26.312791Z",
|
||||
"id": "CVE-2026-122179",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:06:58.388Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-04T19:07:32.306Z",
|
||||
"datePublished": "2026-11-10T18:24:11.942Z",
|
||||
"dateUpdated": "2026-11-10T23:55:47.534Z"
|
||||
"dateUpdated": "2026-11-11T01:06:43.095Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:37:20.768080Z",
|
||||
"id": "CVE-2026-122182",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:06:43.095Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-04T19:07:32.306Z",
|
||||
"datePublished": "2026-11-10T18:24:12.437Z",
|
||||
"dateUpdated": "2026-11-10T23:55:48.044Z"
|
||||
"dateUpdated": "2026-11-11T01:06:26.926Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:37:14.997680Z",
|
||||
"id": "CVE-2026-122183",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:06:26.926Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-05T00:51:41.907Z",
|
||||
"datePublished": "2026-11-10T18:21:42.214Z",
|
||||
"dateUpdated": "2026-11-10T23:53:11.517Z"
|
||||
"dateUpdated": "2026-11-11T01:06:11.293Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:37:09.730799Z",
|
||||
"id": "CVE-2026-122984",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:06:11.293Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-05T00:51:41.907Z",
|
||||
"datePublished": "2026-11-10T18:22:00.162Z",
|
||||
"dateUpdated": "2026-11-10T23:53:32.285Z"
|
||||
"dateUpdated": "2026-11-11T01:05:53.352Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -99,6 +99,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:37:04.257001Z",
|
||||
"id": "CVE-2026-122986",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:05:53.352Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-05T21:53:37.806Z",
|
||||
"datePublished": "2026-11-10T18:20:43.083Z",
|
||||
"dateUpdated": "2026-11-10T23:52:14.969Z"
|
||||
"dateUpdated": "2026-11-11T01:05:37.200Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -451,6 +451,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:36:58.434136Z",
|
||||
"id": "CVE-2026-123388",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:05:37.200Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-05T21:53:37.806Z",
|
||||
"datePublished": "2026-11-10T18:20:43.655Z",
|
||||
"dateUpdated": "2026-11-10T23:52:15.484Z"
|
||||
"dateUpdated": "2026-11-11T01:05:19.522Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:36:53.309375Z",
|
||||
"id": "CVE-2026-123389",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:05:19.522Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-06T22:46:11.430Z",
|
||||
"datePublished": "2026-11-10T18:21:42.752Z",
|
||||
"dateUpdated": "2026-11-10T23:53:14.547Z"
|
||||
"dateUpdated": "2026-11-11T01:05:03.679Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:36:47.673571Z",
|
||||
"id": "CVE-2026-124224",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:05:03.679Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "PSF",
|
||||
"dateReserved": "2026-11-07T00:18:32.381Z",
|
||||
"datePublished": "2026-11-09T14:20:47.891Z",
|
||||
"dateUpdated": "2026-11-10T00:24:54.866Z"
|
||||
"dateUpdated": "2026-11-11T00:25:56.116Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -24,9 +24,9 @@
|
||||
"vendor": "Python Software Foundation",
|
||||
"versions": [
|
||||
{
|
||||
"lessThan": "3.16.0",
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"lessThan": "3.16.0a2",
|
||||
"status": "affected",
|
||||
"versionType": "python"
|
||||
}
|
||||
]
|
||||
@@ -111,7 +111,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
|
||||
"shortName": "PSF",
|
||||
"dateUpdated": "2026-11-10T00:24:54.866Z"
|
||||
"dateUpdated": "2026-11-11T00:25:56.116Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-11-09T18:07:16.437Z",
|
||||
"datePublished": "2026-11-10T18:21:45.225Z",
|
||||
"dateUpdated": "2026-11-10T23:53:16.980Z"
|
||||
"dateUpdated": "2026-11-11T01:04:47.996Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -381,6 +381,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:36:42.462606Z",
|
||||
"id": "CVE-2026-125137",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:04:47.996Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126495",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-10T21:45:21.807Z",
|
||||
"datePublished": "2026-11-11T00:58:48.843Z",
|
||||
"dateUpdated": "2026-11-11T00:58:48.843Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:48.843Z"
|
||||
},
|
||||
"datePublic": "2026-11-10T00:00:00.000Z",
|
||||
"title": "MQTTX through 1.13.3 Stored XSS via Topic Tree and JSON Tree Tooltips",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "MQTTX desktop through 1.13.3 contains a stored cross-site scripting vulnerability that allows attackers to inject script by publishing malicious MQTT topic names or payloads rendered unescaped in tooltips. Attackers controlling a broker or publishing to subscribed topics can execute script in the Electron renderer, which has nodeIntegration enabled, when victims hover Topic Tree or JSON tree nodes."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
|
||||
"cweId": "CWE-79",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "emqx",
|
||||
"product": "MQTTX",
|
||||
"defaultStatus": "unaffected",
|
||||
"packageURL": "pkg:github/emqx/MQTTX",
|
||||
"repo": "https://github.com/emqx/MQTTX",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"lessThanOrEqual": "1.13.3",
|
||||
"status": "affected",
|
||||
"versionType": "semver"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 6.1,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/emqx/MQTTX/issues/2180",
|
||||
"tags": [
|
||||
"issue-tracking"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/emqx/MQTTX/blob/v1.13.3/src/widgets/TreeView.vue#L195-L226",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/emqx/MQTTX/blob/v1.13.3/src/widgets/JSONViewer.vue#L175-L184",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/emqx/MQTTX/blob/v1.13.3/src/background.ts#L276-L283",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/emqx/MQTTX",
|
||||
"tags": [
|
||||
"product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: MQTTX through 1.13.3 Stored XSS via Topic Tree and JSON Tree Tooltips",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/mqttx-through-1.13.3-stored-xss-via-topic-tree-and-json-tree-tooltips"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "ikram-4",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,154 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126496",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-10T21:45:21.807Z",
|
||||
"datePublished": "2026-11-11T00:58:49.598Z",
|
||||
"dateUpdated": "2026-11-11T00:58:49.598Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:49.598Z"
|
||||
},
|
||||
"datePublic": "2026-10-22T00:00:00.000Z",
|
||||
"title": "1Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id}",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that allows authenticated users to read other users' contacts because no organization, owner or data-scope check is applied. Attackers holding ordinary contact or customer read permission can request GET /account/contact/get/{id} with another contact's ID to obtain names, phone numbers, owners, departments, linked customers and custom fields."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Authorization Bypass Through User-Controlled Key",
|
||||
"cweId": "CWE-639",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "1Panel-dev",
|
||||
"product": "CordysCRM",
|
||||
"defaultStatus": "unaffected",
|
||||
"packageURL": "pkg:github/1Panel-dev/CordysCRM",
|
||||
"repo": "https://github.com/1Panel-dev/CordysCRM",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"lessThan": "1.9.6",
|
||||
"status": "affected",
|
||||
"versionType": "semver"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 4.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/1Panel-dev/CordysCRM/issues/3891",
|
||||
"tags": [
|
||||
"issue-tracking"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/1Panel-dev/CordysCRM/commit/a48c6587216810bfad20b398585a51c41842184e",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/1Panel-dev/CordysCRM/releases/tag/v1.9.6",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "CordysCRM v1.9.6 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/1Panel-dev/CordysCRM/blob/v1.9.5/backend/crm/src/main/java/cn/cordys/crm/customer/controller/CustomerContactController.java#L96-L102",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/1Panel-dev/CordysCRM/blob/v1.9.5/backend/crm/src/main/java/cn/cordys/crm/customer/service/CustomerContactService.java#L220-L226",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/1Panel-dev/CordysCRM",
|
||||
"tags": [
|
||||
"product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: 1Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id}",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/1panel-dev-cordyscrm-before-1.9.6-authorization-bypass-via-account-contact-get-id"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "hieuPenguinnn",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,168 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126497",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-10T21:45:21.807Z",
|
||||
"datePublished": "2026-11-11T00:58:50.339Z",
|
||||
"dateUpdated": "2026-11-11T00:58:50.339Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:50.339Z"
|
||||
},
|
||||
"datePublic": "2026-11-08T00:00:00.000Z",
|
||||
"title": "LibreCAD through 2.2.1.6 Heap Out-of-Bounds Write via dwgReader18::parseDataPage",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage() function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 (R2004) DWG file with malicious startOffset values that cause decompress18 to write past the heap buffer when opened, causing crashes and potential code execution."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Out-of-bounds Write",
|
||||
"cweId": "CWE-787",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "LibreCAD",
|
||||
"product": "LibreCAD",
|
||||
"defaultStatus": "unaffected",
|
||||
"packageURL": "pkg:github/LibreCAD/LibreCAD",
|
||||
"repo": "https://github.com/LibreCAD/LibreCAD",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"lessThanOrEqual": "2.2.1.6",
|
||||
"status": "affected",
|
||||
"versionType": "custom"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:librecad:librecad:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "2.2.1.6"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 8.5,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/LibreCAD/LibreCAD/issues/3256",
|
||||
"tags": [
|
||||
"issue-tracking"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/LibreCAD/LibreCAD/commit/17ba2b273b89cc9c8b6fcf71882e327ccf1eebf6",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/LibreCAD/LibreCAD/blob/v2.2.1.6/libraries/libdxfrw/src/intern/dwgreader18.cpp#L113-L173",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/LibreCAD/LibreCAD",
|
||||
"tags": [
|
||||
"product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: LibreCAD through 2.2.1.6 Heap Out-of-Bounds Write via dwgReader18::parseDataPage",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/librecad-through-2.2.1.6-heap-out-of-bounds-write-via-dwgreader18-parsedatapage"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Lee Keon-Hyeong",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Park-Jung-Hyun",
|
||||
"type": "finder"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "dxli",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,149 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126498",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-10T21:45:21.807Z",
|
||||
"datePublished": "2026-11-11T00:58:50.974Z",
|
||||
"dateUpdated": "2026-11-11T00:58:50.974Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:50.974Z"
|
||||
},
|
||||
"datePublic": "2026-11-09T22:46:22.000Z",
|
||||
"title": "WriteFreely before 0.17.3 Stored XSS via Unsanitized Post Slug",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "WriteFreely before 0.17.3 contains a stored cross-site scripting vulnerability that allows authenticated authors to inject HTML by supplying a malicious post slug via the CreatePost API. The raw slug is concatenated into an anchor by augmentReadingDestination() for paid-shortcode posts, executing script for RSS/Atom feed readers, newsletter recipients and ActivityPub viewers."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
|
||||
"cweId": "CWE-79",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Musing Studio",
|
||||
"product": "WriteFreely",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"lessThan": "0.17.3",
|
||||
"status": "affected",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:golang/github.com/writefreely/writefreely",
|
||||
"repo": "https://github.com/writefreely/writefreely"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.1,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/writefreely/writefreely/security/advisories/GHSA-cwxm-8ch5-j2vh",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-cwxm-8ch5-j2vh)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/writefreely/writefreely/commit/d7231d81a914f1314a218d5e8fde6e0341391ccd",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/writefreely/writefreely/releases/tag/v0.17.3",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "WriteFreely v0.17.3 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/writefreely/writefreely/blob/v0.17.2/postrender.go#L117-L121",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/writefreely/writefreely/blob/v0.17.2/database.go#L702-L705",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: WriteFreely before 0.17.3 Stored XSS via Unsanitized Post Slug",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/writefreely-before-0.17.3-stored-xss-via-unsanitized-post-slug"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "George Chen",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,159 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126499",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-10T21:45:21.807Z",
|
||||
"datePublished": "2026-11-11T00:58:51.612Z",
|
||||
"dateUpdated": "2026-11-11T00:58:51.612Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:51.612Z"
|
||||
},
|
||||
"datePublic": "2026-09-22T01:21:43.000Z",
|
||||
"title": "Jellyfin before 12.0 Path Traversal via Library VirtualFolders Endpoints",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Jellyfin before 12.0 contains a path traversal vulnerability in the DELETE /Library/VirtualFolders and POST /Library/VirtualFolders/Name endpoints that allows attackers to delete or move directories via unvalidated library names. Unauthenticated attackers can supply names like .. or absolute paths before setup completes to recursively delete the data directory and jellyfin.db."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
|
||||
"cweId": "CWE-22",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "jellyfin",
|
||||
"product": "jellyfin",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"lessThan": "12.0",
|
||||
"status": "affected",
|
||||
"versionType": "custom"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/jellyfin/jellyfin",
|
||||
"repo": "https://github.com/jellyfin/jellyfin"
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:jellyfin:jellyfin:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "12.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 8.3,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.4,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/jellyfin/jellyfin/security/advisories/GHSA-6828-c7cx-hvqm",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-6828-c7cx-hvqm)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/jellyfin/jellyfin/commit/0c560b22ce73323329645b836c9910abc257ce4e",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/jellyfin/jellyfin/releases/tag/v12.0",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "Jellyfin v12.0 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/jellyfin/jellyfin/blob/v10.11.11/Jellyfin.Api/Controllers/LibraryStructureController.cs#L127-L176",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/jellyfin/jellyfin/blob/v10.11.11/Emby.Server.Implementations/Library/LibraryManager.cs#L3255-L3275",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: Jellyfin before 12.0 Path Traversal via Library VirtualFolders Endpoints",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/jellyfin-before-12.0-path-traversal-via-library-virtualfolders-endpoints"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,160 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126539",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T00:14:02.012Z",
|
||||
"datePublished": "2026-11-11T00:58:52.738Z",
|
||||
"dateUpdated": "2026-11-11T00:58:52.738Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:52.738Z"
|
||||
},
|
||||
"datePublic": "2026-08-05T14:10:57.000Z",
|
||||
"title": "Directus before 12.1.0 Authorization Bypass via Public WebSocket REST Interface",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Directus before 12.1.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to skip permission checks by sending a failed auth message on public-mode WebSocket connections. Attackers can send an invalid token so handleAuthRequest sets accountability to null, then read, create, update or delete records in any user-defined collection."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Not Failing Securely ('Failing Open')",
|
||||
"cweId": "CWE-636",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "directus",
|
||||
"product": "directus",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"lessThan": "12.1.0",
|
||||
"status": "affected",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:npm/directus",
|
||||
"repo": "https://github.com/directus/directus"
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:monospace:directus:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "12.1.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 9.2,
|
||||
"baseSeverity": "CRITICAL"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.1,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/directus/directus/security/advisories/GHSA-97xr-jchp-xm3c",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-97xr-jchp-xm3c)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/directus/directus/commit/8d4cd86783bcbf5444eaf290e8dcecb33929300e",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/directus/directus/releases/tag/v12.1.0",
|
||||
"tags": [
|
||||
"release-notes"
|
||||
],
|
||||
"name": "Directus v12.1.0 Release Notes"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/directus/directus/blob/v12.0.2/api/src/websocket/controllers/base.ts#L381-L397",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: Directus before 12.1.0 Authorization Bypass via Public WebSocket REST Interface",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/directus-before-12.1.0-authorization-bypass-via-public-websocket-rest-interface"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "JacobBrackett",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,159 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126541",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T00:33:09.552Z",
|
||||
"datePublished": "2026-11-11T00:58:53.392Z",
|
||||
"dateUpdated": "2026-11-11T00:58:53.392Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:53.392Z"
|
||||
},
|
||||
"datePublic": "2026-11-09T17:52:18.000Z",
|
||||
"title": "WWBN AVideo through 29.7.1 Missing Authorization via Live Restream Endpoints",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in Live plugin restream endpoints that allows authenticated streamers to obtain other users' stream keys by supplying arbitrary live_transmitions_history_id values. Attackers can redeem the issued action tokens at verifyTokenForAction.json.php to retrieve victims' HLS URLs and stream keys, then publish as the victim or restream private or pay-per-view lives."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Authorization Bypass Through User-Controlled Key",
|
||||
"cweId": "CWE-639",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "WWBN",
|
||||
"product": "AVideo",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"lessThanOrEqual": "29.7.1",
|
||||
"status": "affected",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/WWBN/AVideo",
|
||||
"repo": "https://github.com/WWBN/AVideo"
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "29.7.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 8.6,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 8.1,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/security/advisories/GHSA-233c-vfmw-6rw9",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-233c-vfmw-6rw9)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/commit/be9d70199279aafe5062744d319fd4df4e5f7a48",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/blob/v29.7.1/plugin/Live/view/getRestream.json.php#L27-L48",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/blob/v29.7.1/plugin/Live/view/Live_restreams/verifyTokenForAction.json.php#L30-L56",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: WWBN AVideo through 29.7.1 Missing Authorization via Live Restream Endpoints",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/wwbn-avideo-through-29.7.1-missing-authorization-via-live-restream-endpoints"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "AlpetGexha",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,160 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126542",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T00:33:09.912Z",
|
||||
"datePublished": "2026-11-11T00:58:54.004Z",
|
||||
"dateUpdated": "2026-11-11T00:58:54.004Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:54.004Z"
|
||||
},
|
||||
"datePublic": "2026-11-09T16:43:34.000Z",
|
||||
"title": "WWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social Login",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user via Hybridauth social login display names. Attackers can set their X, Facebook, Yahoo or LinkedIn display name to a victim's username and withhold email, causing login.json.php or oauth2.php to log them in as that account, including administrators, without a password."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Authentication Bypass by Spoofing",
|
||||
"cweId": "CWE-290",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "WWBN",
|
||||
"product": "AVideo",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "6.5",
|
||||
"lessThanOrEqual": "29.7.1",
|
||||
"status": "affected",
|
||||
"versionType": "custom"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/WWBN/AVideo",
|
||||
"repo": "https://github.com/WWBN/AVideo"
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.5",
|
||||
"versionEndIncluding": "29.7.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 9.3,
|
||||
"baseSeverity": "CRITICAL"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/security/advisories/GHSA-9rvm-cfc4-q9g9",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-9rvm-cfc4-q9g9)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/commit/d34ccf23b37a127a68478d66ac00b450b5788bad",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/blob/v29.7.1/objects/login.json.php#L133-L145",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/blob/v29.7.1/plugin/MobileManager/oauth2.php#L90-L102",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: WWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social Login",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/wwbn-avideo-6.5-through-29.7.1-authentication-bypass-via-hybridauth-social-login"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "AlpetGexha",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,153 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126543",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T00:33:10.272Z",
|
||||
"datePublished": "2026-11-11T00:58:54.710Z",
|
||||
"dateUpdated": "2026-11-11T00:58:54.710Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:54.710Z"
|
||||
},
|
||||
"datePublic": "2026-11-09T17:59:26.000Z",
|
||||
"title": "WWBN AVideo through 29.7.1 Wallet Credit Manipulation via PayPalYPT ipnV2.php",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "WWBN AVideo through 29.7.1 contains an improper payment verification vulnerability in plugin/PayPalYPT/ipnV2.php that credits wallets from PayPal IPNs not bound to the site's merchant account. Unauthenticated attackers can forward genuine VERIFIED recurring-payment IPNs from their own PayPal account with a chosen users_id to add wallet balance each billing cycle."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Insufficient Verification of Data Authenticity",
|
||||
"cweId": "CWE-345",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "WWBN",
|
||||
"product": "AVideo",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"lessThanOrEqual": "29.7.1",
|
||||
"status": "affected",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/WWBN/AVideo",
|
||||
"repo": "https://github.com/WWBN/AVideo"
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "29.7.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/security/advisories/GHSA-5gg3-9jhh-xf86",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-5gg3-9jhh-xf86)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/commit/98406b7944e035e72082665ac886d78fc3af0a7f",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/blob/v29.7.1/plugin/PayPalYPT/ipnV2.php#L87-L125",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: WWBN AVideo through 29.7.1 Wallet Credit Manipulation via PayPalYPT ipnV2.php",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/wwbn-avideo-through-29.7.1-wallet-credit-manipulation-via-paypalypt-ipnv2-php"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "AlpetGexha",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,154 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126544",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T00:33:10.618Z",
|
||||
"datePublished": "2026-11-11T00:58:55.390Z",
|
||||
"dateUpdated": "2026-11-11T00:58:55.390Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:55.390Z"
|
||||
},
|
||||
"datePublic": "2026-11-09T16:08:28.000Z",
|
||||
"title": "WWBN AVideo 6.5 through 29.7.1 Email Verification Bypass via User::verifyCode()",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode() in objects/user.php caused by PHP loose comparison of the recoverPass token. Registered users can reuse the installation-wide salt from their own verification link and craft a code with arbitrary users_id and recoverPass set to true to verify other accounts' emails, unlocking features such as live streaming."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Comparison of Incompatible Types",
|
||||
"cweId": "CWE-1024",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "WWBN",
|
||||
"product": "AVideo",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "6.5",
|
||||
"lessThanOrEqual": "29.7.1",
|
||||
"status": "affected",
|
||||
"versionType": "custom"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/WWBN/AVideo",
|
||||
"repo": "https://github.com/WWBN/AVideo"
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.5",
|
||||
"versionEndIncluding": "29.7.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 4.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/security/advisories/GHSA-f72w-prhp-h385",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-f72w-prhp-h385)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/commit/115116813611f2cbabfee3f5d9b49ce6f25ae959",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/blob/v29.7.1/objects/user.php#L3293-L3307",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: WWBN AVideo 6.5 through 29.7.1 Email Verification Bypass via User::verifyCode()",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/wwbn-avideo-6.5-through-29.7.1-email-verification-bypass-via-user-verifycode"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "AlpetGexha",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,159 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126545",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T00:33:10.963Z",
|
||||
"datePublished": "2026-11-11T00:58:56.210Z",
|
||||
"dateUpdated": "2026-11-11T00:58:56.210Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:56.210Z"
|
||||
},
|
||||
"datePublic": "2026-11-09T17:39:42.000Z",
|
||||
"title": "WWBN AVideo through 29.7.1 Missing Authorization via get_api_tags API",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in API::get_api_tags() in plugin/API/API.php that allows registered users to access restricted video data by querying the tags API. Attackers can subscribe to a tag and query APIName=tags to obtain filenames, titles and stored video_password values of unlisted, group-restricted and password-protected videos, enabling unauthorized viewing."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Missing Authorization",
|
||||
"cweId": "CWE-862",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "WWBN",
|
||||
"product": "AVideo",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"lessThanOrEqual": "29.7.1",
|
||||
"status": "affected",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"packageURL": "pkg:github/WWBN/AVideo",
|
||||
"repo": "https://github.com/WWBN/AVideo"
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "29.7.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 4.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/security/advisories/GHSA-3w98-8958-84rh",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
],
|
||||
"name": "GitHub Security Advisory (GHSA-3w98-8958-84rh)"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/commit/a8d1e0e484d655556422841d08b2b0fb64332721",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/blob/v29.7.1/plugin/API/API.php#L958-L976",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/WWBN/AVideo/blob/v29.7.1/plugin/VideoTags/Objects/TagsHasVideos.php#L172-L180",
|
||||
"tags": [
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: WWBN AVideo through 29.7.1 Missing Authorization via get_api_tags API",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/wwbn-avideo-through-29.7.1-missing-authorization-via-get-api-tags-api"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "AlpetGexha",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,127 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126546",
|
||||
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulnCheck",
|
||||
"dateReserved": "2026-11-11T00:33:11.321Z",
|
||||
"datePublished": "2026-11-11T00:58:56.968Z",
|
||||
"dateUpdated": "2026-11-11T00:58:56.968Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
|
||||
"shortName": "VulnCheck",
|
||||
"dateUpdated": "2026-11-11T00:58:56.968Z"
|
||||
},
|
||||
"datePublic": "2026-11-10T00:00:00.000Z",
|
||||
"title": "Viber for iOS through 29.4.0.24 Denial of Service via Malformed GIF",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received GIF headers, allowing attackers to crash the app. Attackers can send a crafted GIF with zero dimensions that triggers an uncaught NSInternalInconsistencyException, aborting the app with SIGABRT when opened."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "Uncaught Exception",
|
||||
"cweId": "CWE-248",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Rakuten Viber",
|
||||
"product": "Viber for iOS",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"lessThanOrEqual": "29.4.0.24",
|
||||
"status": "affected",
|
||||
"versionType": "custom"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 4.3,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-6039.php",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.viber.com",
|
||||
"tags": [
|
||||
"product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "VulnCheck Advisory: Viber for iOS through 29.4.0.24 Denial of Service via Malformed GIF",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
],
|
||||
"url": "https://www.vulncheck.com/advisories/viber-for-ios-through-29.4.0.24-denial-of-service-via-malformed-gif"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Gjoko Krstic",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "vulncheck-endgame"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "PSF",
|
||||
"dateReserved": "2026-08-11T15:22:01.993Z",
|
||||
"datePublished": "2026-11-09T14:15:31.799Z",
|
||||
"dateUpdated": "2026-11-10T00:23:24.944Z"
|
||||
"dateUpdated": "2026-11-11T00:24:21.738Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -23,9 +23,9 @@
|
||||
"vendor": "Python Software Foundation",
|
||||
"versions": [
|
||||
{
|
||||
"lessThan": "3.16.0",
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"lessThan": "3.16.0a2",
|
||||
"status": "affected",
|
||||
"versionType": "python"
|
||||
}
|
||||
]
|
||||
@@ -123,7 +123,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
|
||||
"shortName": "PSF",
|
||||
"dateUpdated": "2026-11-10T00:23:24.944Z"
|
||||
"dateUpdated": "2026-11-11T00:24:21.738Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-06-16T17:47:22.542Z",
|
||||
"datePublished": "2026-11-10T19:20:16.527Z",
|
||||
"dateUpdated": "2026-11-10T19:20:16.527Z"
|
||||
"dateUpdated": "2026-11-11T00:53:27.901Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.4,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-55297",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-11T00:46:44.606937Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-362",
|
||||
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:53:27.901Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-06-16T17:52:49.256Z",
|
||||
"datePublished": "2026-11-10T19:20:25.144Z",
|
||||
"dateUpdated": "2026-11-10T19:20:25.144Z"
|
||||
"dateUpdated": "2026-11-11T01:03:33.734Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.7,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-55346",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-11T01:00:49.026288Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-119",
|
||||
"description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:03:33.734Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-06-23T16:03:12.304Z",
|
||||
"datePublished": "2026-11-10T19:20:28.993Z",
|
||||
"dateUpdated": "2026-11-10T19:20:28.993Z"
|
||||
"dateUpdated": "2026-11-11T00:56:16.394Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,56 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.7,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:55:09.101922Z",
|
||||
"id": "CVE-2026-56884",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:56:16.394Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-06-23T16:08:36.835Z",
|
||||
"datePublished": "2026-11-10T19:20:35.087Z",
|
||||
"dateUpdated": "2026-11-10T19:20:35.087Z"
|
||||
"dateUpdated": "2026-11-11T01:03:33.563Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.7,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-56911",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-11T01:00:44.846922Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-119",
|
||||
"description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:03:33.563Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-06-23T16:15:23.845Z",
|
||||
"datePublished": "2026-11-10T19:20:52.815Z",
|
||||
"dateUpdated": "2026-11-10T19:20:52.815Z"
|
||||
"dateUpdated": "2026-11-11T00:53:27.747Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.4,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-56949",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-11T00:46:35.730326Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-362",
|
||||
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:53:27.747Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-06-23T16:26:29.783Z",
|
||||
"datePublished": "2026-11-10T19:21:04.312Z",
|
||||
"dateUpdated": "2026-11-10T19:21:04.312Z"
|
||||
"dateUpdated": "2026-11-11T01:09:36.589Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-453",
|
||||
"lang": "en",
|
||||
"description": "CWE-453 Insecure Default Variable Initialization"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.7,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T01:08:43.915297Z",
|
||||
"id": "CVE-2026-57013",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:09:36.589Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-02T05:40:51.923Z",
|
||||
"datePublished": "2026-11-10T19:21:20.876Z",
|
||||
"dateUpdated": "2026-11-10T19:21:20.876Z"
|
||||
"dateUpdated": "2026-11-11T01:03:33.416Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.7,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-58729",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-11T01:00:40.300193Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-119",
|
||||
"description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:03:33.416Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-02T05:48:47.082Z",
|
||||
"datePublished": "2026-11-10T19:21:27.581Z",
|
||||
"dateUpdated": "2026-11-10T19:21:27.581Z"
|
||||
"dateUpdated": "2026-11-11T00:53:27.598Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.4,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-58778",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-11T00:46:26.559918Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-362",
|
||||
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:53:27.598Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-02T05:48:47.082Z",
|
||||
"datePublished": "2026-11-10T19:21:30.462Z",
|
||||
"dateUpdated": "2026-11-10T19:21:30.462Z"
|
||||
"dateUpdated": "2026-11-11T01:03:33.114Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.7,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-58781",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-11T01:00:32.627684Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-119",
|
||||
"description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:03:33.114Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-02T05:49:59.328Z",
|
||||
"datePublished": "2026-11-10T19:21:33.353Z",
|
||||
"dateUpdated": "2026-11-10T19:21:33.353Z"
|
||||
"dateUpdated": "2026-11-11T01:03:33.261Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.7,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-58785",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-11T01:00:36.387939Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-119",
|
||||
"description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:03:33.261Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-02T05:52:23.114Z",
|
||||
"datePublished": "2026-11-10T19:21:49.683Z",
|
||||
"dateUpdated": "2026-11-10T19:21:49.683Z"
|
||||
"dateUpdated": "2026-11-11T00:30:21.844Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-400",
|
||||
"lang": "en",
|
||||
"description": "CWE-400 Uncontrolled Resource Consumption"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "NONE"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:30:18.881155Z",
|
||||
"id": "CVE-2026-58807",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:30:21.844Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-02T05:52:23.114Z",
|
||||
"datePublished": "2026-11-10T19:21:51.611Z",
|
||||
"dateUpdated": "2026-11-10T19:21:51.611Z"
|
||||
"dateUpdated": "2026-11-11T00:59:06.801Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-119",
|
||||
"lang": "en",
|
||||
"description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.7,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:59:03.484049Z",
|
||||
"id": "CVE-2026-58809",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:59:06.801Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-06T06:21:53.236Z",
|
||||
"datePublished": "2026-11-10T19:22:02.122Z",
|
||||
"dateUpdated": "2026-11-10T19:22:02.122Z"
|
||||
"dateUpdated": "2026-11-11T00:29:36.746Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-190",
|
||||
"lang": "en",
|
||||
"description": "CWE-190 Integer Overflow or Wraparound"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "NONE"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:29:33.618901Z",
|
||||
"id": "CVE-2026-59582",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:29:36.746Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-06T06:25:53.894Z",
|
||||
"datePublished": "2026-11-10T19:22:09.871Z",
|
||||
"dateUpdated": "2026-11-10T19:22:09.871Z"
|
||||
"dateUpdated": "2026-11-11T00:27:47.330Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-400",
|
||||
"lang": "en",
|
||||
"description": "CWE-400 Uncontrolled Resource Consumption"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "NONE"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:27:42.530968Z",
|
||||
"id": "CVE-2026-59595",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:27:47.330Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-06T06:27:19.075Z",
|
||||
"datePublished": "2026-11-10T19:22:15.665Z",
|
||||
"dateUpdated": "2026-11-10T19:22:15.665Z"
|
||||
"dateUpdated": "2026-11-11T00:27:17.804Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-416",
|
||||
"lang": "en",
|
||||
"description": "CWE-416 Use After Free"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "NONE"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:27:13.811718Z",
|
||||
"id": "CVE-2026-59603",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:27:17.804Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-06T06:27:19.075Z",
|
||||
"datePublished": "2026-11-10T19:22:22.400Z",
|
||||
"dateUpdated": "2026-11-10T19:22:22.400Z"
|
||||
"dateUpdated": "2026-11-11T00:26:48.265Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-20",
|
||||
"lang": "en",
|
||||
"description": "CWE-20 Improper Input Validation"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "NONE"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:26:45.215089Z",
|
||||
"id": "CVE-2026-59611",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:26:48.265Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-06T06:28:31.381Z",
|
||||
"datePublished": "2026-11-10T19:22:24.347Z",
|
||||
"dateUpdated": "2026-11-10T19:22:24.347Z"
|
||||
"dateUpdated": "2026-11-11T00:26:23.213Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-20",
|
||||
"lang": "en",
|
||||
"description": "CWE-20 Improper Input Validation"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "NONE"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:26:19.902815Z",
|
||||
"id": "CVE-2026-59613",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:26:23.213Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-07-06T06:29:35.786Z",
|
||||
"datePublished": "2026-11-10T19:22:29.220Z",
|
||||
"dateUpdated": "2026-11-10T19:22:29.220Z"
|
||||
"dateUpdated": "2026-11-11T00:25:53.354Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-119",
|
||||
"lang": "en",
|
||||
"description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "NONE"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:25:46.130924Z",
|
||||
"id": "CVE-2026-59623",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:25:53.354Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-08-03T23:28:38.302Z",
|
||||
"datePublished": "2026-11-10T18:15:40.991Z",
|
||||
"dateUpdated": "2026-11-10T23:47:06.476Z"
|
||||
"dateUpdated": "2026-11-11T01:04:32.013Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:36:36.950685Z",
|
||||
"id": "CVE-2026-70120",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:04:32.013Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-08-03T23:48:30.860Z",
|
||||
"datePublished": "2026-11-10T18:20:03.922Z",
|
||||
"dateUpdated": "2026-11-10T23:51:38.262Z"
|
||||
"dateUpdated": "2026-11-11T01:04:16.548Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -166,6 +166,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:36:31.721595Z",
|
||||
"id": "CVE-2026-70182",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:04:16.548Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-08-03T23:54:57.810Z",
|
||||
"datePublished": "2026-11-10T18:15:39.390Z",
|
||||
"dateUpdated": "2026-11-10T23:47:05.970Z"
|
||||
"dateUpdated": "2026-11-11T01:04:01.043Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:36:26.526038Z",
|
||||
"id": "CVE-2026-70231",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:04:01.043Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-08-31T19:05:20.870Z",
|
||||
"datePublished": "2026-11-10T18:20:03.321Z",
|
||||
"dateUpdated": "2026-11-10T23:51:37.738Z"
|
||||
"dateUpdated": "2026-11-11T01:03:45.393Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -250,6 +250,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:36:21.405671Z",
|
||||
"id": "CVE-2026-83563",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:03:45.393Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-08-31T23:21:53.300Z",
|
||||
"datePublished": "2026-11-10T18:15:16.555Z",
|
||||
"dateUpdated": "2026-11-10T23:46:40.985Z"
|
||||
"dateUpdated": "2026-11-11T01:03:28.463Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -166,6 +166,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:36:16.006762Z",
|
||||
"id": "CVE-2026-83894",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:03:28.463Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-04T18:08:54.993Z",
|
||||
"datePublished": "2026-11-10T18:15:25.327Z",
|
||||
"dateUpdated": "2026-11-10T23:46:51.721Z"
|
||||
"dateUpdated": "2026-11-11T01:03:11.998Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:36:10.709293Z",
|
||||
"id": "CVE-2026-85801",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:03:11.998Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-04T18:15:10.738Z",
|
||||
"datePublished": "2026-11-10T18:15:38.882Z",
|
||||
"dateUpdated": "2026-11-10T23:47:05.533Z"
|
||||
"dateUpdated": "2026-11-11T01:02:56.415Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -457,6 +457,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:36:05.522837Z",
|
||||
"id": "CVE-2026-85862",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:02:56.415Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-04T18:21:15.992Z",
|
||||
"datePublished": "2026-11-10T18:16:51.279Z",
|
||||
"dateUpdated": "2026-11-10T23:48:22.261Z"
|
||||
"dateUpdated": "2026-11-11T01:02:40.333Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:35:59.905693Z",
|
||||
"id": "CVE-2026-85907",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:02:40.333Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-04T18:24:41.251Z",
|
||||
"datePublished": "2026-11-10T18:17:48.862Z",
|
||||
"dateUpdated": "2026-11-10T23:49:20.319Z"
|
||||
"dateUpdated": "2026-11-11T01:02:24.768Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -208,6 +208,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:35:54.618896Z",
|
||||
"id": "CVE-2026-85929",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:02:24.768Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-04T18:24:41.252Z",
|
||||
"datePublished": "2026-11-10T18:19:59.556Z",
|
||||
"dateUpdated": "2026-11-10T23:51:34.099Z"
|
||||
"dateUpdated": "2026-11-11T01:02:09.234Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -381,6 +381,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:35:49.110762Z",
|
||||
"id": "CVE-2026-85942",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:02:09.234Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:01:13.385Z",
|
||||
"datePublished": "2026-11-10T18:16:53.854Z",
|
||||
"dateUpdated": "2026-11-10T23:48:24.880Z"
|
||||
"dateUpdated": "2026-11-11T01:01:51.287Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -381,6 +381,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:35:43.633072Z",
|
||||
"id": "CVE-2026-88213",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:01:51.287Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:01:13.386Z",
|
||||
"datePublished": "2026-11-10T18:16:54.297Z",
|
||||
"dateUpdated": "2026-11-10T23:48:25.383Z"
|
||||
"dateUpdated": "2026-11-11T01:01:35.191Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:35:38.062576Z",
|
||||
"id": "CVE-2026-88215",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:01:35.191Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:01:13.386Z",
|
||||
"datePublished": "2026-11-10T18:15:44.064Z",
|
||||
"dateUpdated": "2026-11-10T23:47:09.175Z"
|
||||
"dateUpdated": "2026-11-11T01:01:19.295Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -276,6 +276,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:35:32.734754Z",
|
||||
"id": "CVE-2026-88221",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:01:19.295Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:01:13.386Z",
|
||||
"datePublished": "2026-11-10T18:16:55.282Z",
|
||||
"dateUpdated": "2026-11-10T23:48:26.549Z"
|
||||
"dateUpdated": "2026-11-11T01:01:03.704Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -206,6 +206,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:35:27.278942Z",
|
||||
"id": "CVE-2026-88224",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:01:03.704Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.670Z",
|
||||
"datePublished": "2026-11-10T18:15:44.510Z",
|
||||
"dateUpdated": "2026-11-10T23:47:09.759Z"
|
||||
"dateUpdated": "2026-11-11T01:00:48.317Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -451,6 +451,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:35:21.152221Z",
|
||||
"id": "CVE-2026-88227",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:00:48.317Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.670Z",
|
||||
"datePublished": "2026-11-10T18:15:45.043Z",
|
||||
"dateUpdated": "2026-11-10T23:47:10.329Z"
|
||||
"dateUpdated": "2026-11-11T01:00:30.750Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -451,6 +451,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:35:15.925695Z",
|
||||
"id": "CVE-2026-88228",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:00:30.750Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.671Z",
|
||||
"datePublished": "2026-11-10T18:15:45.508Z",
|
||||
"dateUpdated": "2026-11-10T23:47:10.833Z"
|
||||
"dateUpdated": "2026-11-11T01:00:14.358Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:35:10.706072Z",
|
||||
"id": "CVE-2026-88230",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:00:14.358Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.671Z",
|
||||
"datePublished": "2026-11-10T18:15:46.560Z",
|
||||
"dateUpdated": "2026-11-10T23:47:11.867Z"
|
||||
"dateUpdated": "2026-11-11T00:59:53.213Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -208,6 +208,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:35:04.804037Z",
|
||||
"id": "CVE-2026-88232",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:59:53.213Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.671Z",
|
||||
"datePublished": "2026-11-10T18:15:47.005Z",
|
||||
"dateUpdated": "2026-11-10T23:47:12.447Z"
|
||||
"dateUpdated": "2026-11-11T00:59:37.112Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:34:57.179786Z",
|
||||
"id": "CVE-2026-88233",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:59:37.112Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.671Z",
|
||||
"datePublished": "2026-11-10T18:15:47.444Z",
|
||||
"dateUpdated": "2026-11-10T23:47:15.368Z"
|
||||
"dateUpdated": "2026-11-11T00:59:21.731Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -315,6 +315,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:34:51.948247Z",
|
||||
"id": "CVE-2026-88235",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:59:21.731Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.671Z",
|
||||
"datePublished": "2026-11-10T18:16:56.991Z",
|
||||
"dateUpdated": "2026-11-10T23:48:28.147Z"
|
||||
"dateUpdated": "2026-11-11T00:59:05.847Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -323,6 +323,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:34:46.802022Z",
|
||||
"id": "CVE-2026-88237",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:59:05.847Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.671Z",
|
||||
"datePublished": "2026-11-10T18:16:57.513Z",
|
||||
"dateUpdated": "2026-11-10T23:48:28.653Z"
|
||||
"dateUpdated": "2026-11-11T00:58:48.707Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -250,6 +250,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:34:41.227367Z",
|
||||
"id": "CVE-2026-88238",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:58:48.707Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.671Z",
|
||||
"datePublished": "2026-11-10T18:16:58.038Z",
|
||||
"dateUpdated": "2026-11-10T23:48:29.311Z"
|
||||
"dateUpdated": "2026-11-11T00:58:31.531Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -423,6 +423,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:34:35.972080Z",
|
||||
"id": "CVE-2026-88239",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:58:31.531Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.671Z",
|
||||
"datePublished": "2026-11-10T18:15:48.498Z",
|
||||
"dateUpdated": "2026-11-10T23:47:16.474Z"
|
||||
"dateUpdated": "2026-11-11T00:58:16.058Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:34:30.784652Z",
|
||||
"id": "CVE-2026-88241",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:58:16.058Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.671Z",
|
||||
"datePublished": "2026-11-10T18:16:59.149Z",
|
||||
"dateUpdated": "2026-11-10T23:48:30.447Z"
|
||||
"dateUpdated": "2026-11-11T00:57:59.472Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:34:25.137889Z",
|
||||
"id": "CVE-2026-88242",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:57:59.472Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-09T22:05:19.672Z",
|
||||
"datePublished": "2026-11-10T18:17:00.272Z",
|
||||
"dateUpdated": "2026-11-10T23:48:31.601Z"
|
||||
"dateUpdated": "2026-11-11T00:57:43.894Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -120,6 +120,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:34:19.921634Z",
|
||||
"id": "CVE-2026-88245",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:57:43.894Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-21T18:23:52.965Z",
|
||||
"datePublished": "2026-11-10T18:17:00.785Z",
|
||||
"dateUpdated": "2026-11-10T23:48:32.108Z"
|
||||
"dateUpdated": "2026-11-11T00:57:28.216Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -381,6 +381,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:34:14.750809Z",
|
||||
"id": "CVE-2026-94507",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:57:28.216Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-21T18:23:52.966Z",
|
||||
"datePublished": "2026-11-10T18:17:01.231Z",
|
||||
"dateUpdated": "2026-11-10T23:48:32.685Z"
|
||||
"dateUpdated": "2026-11-11T00:57:12.208Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:34:09.144930Z",
|
||||
"id": "CVE-2026-94514",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:57:12.208Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-21T18:23:52.966Z",
|
||||
"datePublished": "2026-11-10T18:15:50.626Z",
|
||||
"dateUpdated": "2026-11-10T23:47:18.601Z"
|
||||
"dateUpdated": "2026-11-11T00:56:56.359Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -381,6 +381,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:34:03.532745Z",
|
||||
"id": "CVE-2026-94515",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:56:56.359Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-21T18:23:52.966Z",
|
||||
"datePublished": "2026-11-10T18:15:51.754Z",
|
||||
"dateUpdated": "2026-11-10T23:47:19.631Z"
|
||||
"dateUpdated": "2026-11-11T00:56:40.784Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -214,6 +214,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:33:57.839240Z",
|
||||
"id": "CVE-2026-94519",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:56:40.784Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-21T18:23:52.967Z",
|
||||
"datePublished": "2026-11-10T18:15:52.269Z",
|
||||
"dateUpdated": "2026-11-10T23:47:20.140Z"
|
||||
"dateUpdated": "2026-11-11T00:56:25.321Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:33:52.244217Z",
|
||||
"id": "CVE-2026-94522",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:56:25.321Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-21T18:23:52.967Z",
|
||||
"datePublished": "2026-11-10T18:15:52.787Z",
|
||||
"dateUpdated": "2026-11-10T23:47:20.641Z"
|
||||
"dateUpdated": "2026-11-11T00:56:08.037Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -451,6 +451,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:33:46.999340Z",
|
||||
"id": "CVE-2026-94527",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:56:08.037Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-21T18:23:52.967Z",
|
||||
"datePublished": "2026-11-10T18:17:02.368Z",
|
||||
"dateUpdated": "2026-11-10T23:48:33.855Z"
|
||||
"dateUpdated": "2026-11-11T00:55:50.573Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -282,6 +282,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:33:41.858017Z",
|
||||
"id": "CVE-2026-94529",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:55:50.573Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-21T18:23:52.968Z",
|
||||
"datePublished": "2026-11-10T18:17:02.847Z",
|
||||
"dateUpdated": "2026-11-10T23:48:34.456Z"
|
||||
"dateUpdated": "2026-11-11T00:55:34.372Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:33:36.093655Z",
|
||||
"id": "CVE-2026-94531",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:55:34.372Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "Google_Devices",
|
||||
"dateReserved": "2026-09-22T05:59:06.219Z",
|
||||
"datePublished": "2026-11-10T19:22:47.262Z",
|
||||
"dateUpdated": "2026-11-10T19:22:47.262Z"
|
||||
"dateUpdated": "2026-11-11T01:08:35.265Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,6 +54,68 @@
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.7.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-453",
|
||||
"lang": "en",
|
||||
"description": "CWE-453 Insecure Default Variable Initialization"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.7,
|
||||
"attackVector": "LOCAL",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T01:08:32.152246Z",
|
||||
"id": "CVE-2026-95404",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T01:08:35.265Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:07:11.908Z",
|
||||
"datePublished": "2026-11-10T18:17:03.448Z",
|
||||
"dateUpdated": "2026-11-10T23:48:35.037Z"
|
||||
"dateUpdated": "2026-11-11T00:55:18.869Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -282,6 +282,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:33:30.930540Z",
|
||||
"id": "CVE-2026-95871",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:55:18.869Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:07:11.909Z",
|
||||
"datePublished": "2026-11-10T18:15:53.304Z",
|
||||
"dateUpdated": "2026-11-10T23:47:21.089Z"
|
||||
"dateUpdated": "2026-11-11T00:55:02.714Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:33:25.578846Z",
|
||||
"id": "CVE-2026-95872",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:55:02.714Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:07:11.909Z",
|
||||
"datePublished": "2026-11-10T18:15:53.826Z",
|
||||
"dateUpdated": "2026-11-10T23:47:21.593Z"
|
||||
"dateUpdated": "2026-11-11T00:54:47.231Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -424,6 +424,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:33:20.050621Z",
|
||||
"id": "CVE-2026-95874",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:54:47.231Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:07:11.909Z",
|
||||
"datePublished": "2026-11-10T18:17:03.981Z",
|
||||
"dateUpdated": "2026-11-10T23:48:35.586Z"
|
||||
"dateUpdated": "2026-11-11T00:54:31.766Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:33:14.753287Z",
|
||||
"id": "CVE-2026-95876",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:54:31.766Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:07:11.909Z",
|
||||
"datePublished": "2026-11-10T18:17:04.509Z",
|
||||
"dateUpdated": "2026-11-10T23:48:36.161Z"
|
||||
"dateUpdated": "2026-11-11T00:54:16.106Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -423,6 +423,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:33:09.564449Z",
|
||||
"id": "CVE-2026-95877",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:54:16.106Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:07:11.909Z",
|
||||
"datePublished": "2026-11-10T18:17:05.013Z",
|
||||
"dateUpdated": "2026-11-10T23:48:36.705Z"
|
||||
"dateUpdated": "2026-11-11T00:53:59.907Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:33:04.263533Z",
|
||||
"id": "CVE-2026-95879",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:53:59.907Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:07:11.909Z",
|
||||
"datePublished": "2026-11-10T18:17:05.567Z",
|
||||
"dateUpdated": "2026-11-10T23:48:37.247Z"
|
||||
"dateUpdated": "2026-11-11T00:53:43.143Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:32:58.204629Z",
|
||||
"id": "CVE-2026-95881",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:53:43.143Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:07:11.910Z",
|
||||
"datePublished": "2026-11-10T18:17:06.133Z",
|
||||
"dateUpdated": "2026-11-10T23:48:37.702Z"
|
||||
"dateUpdated": "2026-11-11T00:53:26.237Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -381,6 +381,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:32:53.077814Z",
|
||||
"id": "CVE-2026-95888",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:53:26.237Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:07:11.910Z",
|
||||
"datePublished": "2026-11-10T18:15:56.028Z",
|
||||
"dateUpdated": "2026-11-10T23:47:23.594Z"
|
||||
"dateUpdated": "2026-11-11T00:53:10.899Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:32:47.840741Z",
|
||||
"id": "CVE-2026-95894",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:53:10.899Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:07:11.910Z",
|
||||
"datePublished": "2026-11-10T18:17:08.153Z",
|
||||
"dateUpdated": "2026-11-10T23:48:39.807Z"
|
||||
"dateUpdated": "2026-11-11T00:52:53.943Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -381,6 +381,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:32:42.702954Z",
|
||||
"id": "CVE-2026-95895",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:52:53.943Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:16:22.225Z",
|
||||
"datePublished": "2026-11-10T18:15:56.543Z",
|
||||
"dateUpdated": "2026-11-10T23:47:24.196Z"
|
||||
"dateUpdated": "2026-11-11T00:52:38.377Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:32:37.505636Z",
|
||||
"id": "CVE-2026-95898",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:52:38.377Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-22T17:16:22.225Z",
|
||||
"datePublished": "2026-11-10T18:15:57.438Z",
|
||||
"dateUpdated": "2026-11-10T23:47:25.324Z"
|
||||
"dateUpdated": "2026-11-11T00:52:22.883Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-11T00:32:32.324707Z",
|
||||
"id": "CVE-2026-95902",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-11T00:52:22.883Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user