From dee479055825fa926a7b1271c978fd24222522bd Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Thu, 12 Nov 2026 10:31:50 +0100 Subject: [PATCH] CVE sync 2026-11-12T09:31:45Z --- data/2026/110xxx/CVE-2026-110003.json | 157 ++++++++++++ data/2026/111xxx/CVE-2026-111433.json | 10 +- data/2026/111xxx/CVE-2026-111434.json | 10 +- data/2026/111xxx/CVE-2026-111435.json | 10 +- data/2026/111xxx/CVE-2026-111436.json | 20 +- data/2026/126xxx/CVE-2026-126642.json | 161 +++++++++++++ data/2026/90xxx/CVE-2026-90908.json | 212 ++++++++++++++++ data/delta.json | 32 ++- data/deltaLog.json | 333 ++++++-------------------- state/sync.json | 6 +- 10 files changed, 669 insertions(+), 282 deletions(-) create mode 100644 data/2026/110xxx/CVE-2026-110003.json create mode 100644 data/2026/126xxx/CVE-2026-126642.json create mode 100644 data/2026/90xxx/CVE-2026-90908.json diff --git a/data/2026/110xxx/CVE-2026-110003.json b/data/2026/110xxx/CVE-2026-110003.json new file mode 100644 index 0000000000..c5a5835f45 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110003.json @@ -0,0 +1,157 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110003", + "assignerOrgId": "769c9ae7-73c3-4e47-ae19-903170fc3eb8", + "state": "PUBLISHED", + "assignerShortName": "Payara", + "dateReserved": "2026-10-13T13:52:54.391Z", + "datePublished": "2026-11-12T08:43:19.548Z", + "dateUpdated": "2026-11-12T08:43:19.548Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "769c9ae7-73c3-4e47-ae19-903170fc3eb8", + "shortName": "Payara", + "dateUpdated": "2026-11-12T08:43:19.548Z" + }, + "title": "Azul Payara Administration REST Interface Authentication Bypass via X-GlassFish-authToken Header Leading to Remote Code Execution", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-288", + "description": "CWE-288: Authentication Bypass Using an Alternate Path or Channel", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Azul Payara", + "product": "Payara Server", + "versions": [ + { + "status": "affected", + "version": "7.0.0", + "lessThan": "7.6.0", + "versionType": "semver" + }, + { + "status": "affected", + "version": "7.2024.1.Alpha1", + "lessThan": "7.2026.11", + "versionType": "custom" + }, + { + "status": "affected", + "version": "6.0.0", + "lessThan": "6.44.0", + "versionType": "semver" + }, + { + "status": "affected", + "version": "6.2022.1", + "lessThanOrEqual": "6.2025.11", + "versionType": "custom" + }, + { + "status": "affected", + "version": "5.20.0", + "lessThan": "5.93.0", + "versionType": "semver" + }, + { + "status": "affected", + "version": "5.181", + "lessThanOrEqual": "5.201.2", + "versionType": "custom" + }, + { + "status": "affected", + "version": "5.2020.2", + "lessThanOrEqual": "5.2022.5", + "versionType": "custom" + }, + { + "status": "affected", + "version": "4.1.2.191", + "lessThan": "4.1.2.191.61", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability in the administration REST interface of Azul Payara allows a remote, unauthenticated attacker to bypass secure-admin remote-access restrictions by supplying an arbitrary value in the X-GlassFish-authToken HTTP header. The header's presence waives the remote-rejection check before the token is validated, and an invalid token falls through to password-based authentication, which succeeds without credentials on default domains configured with an empty administrative password. Successful exploitation grants execution of arbitrary administrative commands, equivalent to complete compromise of the server.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

A vulnerability in the administration REST interface of Azul Payara allows a remote, unauthenticated attacker to bypass secure-admin remote-access restrictions by supplying an arbitrary value in the X-GlassFish-authToken HTTP header. The header's presence waives the remote-rejection check before the token is validated, and an invalid token falls through to password-based authentication, which succeeds without credentials on default domains configured with an empty administrative password. Successful exploitation grants execution of arbitrary administrative commands, equivalent to complete compromise of the server.

" + } + ] + } + ], + "references": [ + { + "url": "https://docs.azul.com/payara/version/4/release-notes/release-notes-4.1.2.191.61.html" + }, + { + "url": "https://docs.azul.com/payara/version/5/release-notes/release-notes-5.93.0.html" + }, + { + "url": "https://docs.azul.com/payara/version/6/release-notes/release-notes-6.44.0.html" + }, + { + "url": "https://docs.azul.com/payara/release-notes/release-notes-7.6.0.html" + }, + { + "url": "https://docs.azul.com/payara-community/release-notes/release-notes-7.2026.11.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "CRITICAL", + "baseScore": 9.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111433.json b/data/2026/111xxx/CVE-2026-111433.json index e20ccf604a..92ea63c42d 100644 --- a/data/2026/111xxx/CVE-2026-111433.json +++ b/data/2026/111xxx/CVE-2026-111433.json @@ -8,14 +8,14 @@ "assignerShortName": "openEuler", "dateReserved": "2026-10-16T02:50:14.526Z", "datePublished": "2026-11-12T03:45:51.294Z", - "dateUpdated": "2026-11-12T03:45:51.294Z" + "dateUpdated": "2026-11-12T09:15:38.969Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "7e1ac599-2767-43fa-b3ea-f10178cc98f2", "shortName": "openEuler", - "dateUpdated": "2026-11-12T03:45:51.294Z" + "dateUpdated": "2026-11-12T09:15:38.969Z" }, "problemTypes": [ { @@ -78,6 +78,12 @@ "tags": [ "patch" ] + }, + { + "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865", + "tags": [ + "vendor-advisory" + ] } ], "metrics": [ diff --git a/data/2026/111xxx/CVE-2026-111434.json b/data/2026/111xxx/CVE-2026-111434.json index a2d9306e09..4d120ed2c7 100644 --- a/data/2026/111xxx/CVE-2026-111434.json +++ b/data/2026/111xxx/CVE-2026-111434.json @@ -8,14 +8,14 @@ "assignerShortName": "openEuler", "dateReserved": "2026-10-16T02:50:14.526Z", "datePublished": "2026-11-12T03:47:33.383Z", - "dateUpdated": "2026-11-12T03:47:33.383Z" + "dateUpdated": "2026-11-12T09:16:02.029Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "7e1ac599-2767-43fa-b3ea-f10178cc98f2", "shortName": "openEuler", - "dateUpdated": "2026-11-12T03:47:33.383Z" + "dateUpdated": "2026-11-12T09:16:02.029Z" }, "problemTypes": [ { @@ -78,6 +78,12 @@ "tags": [ "patch" ] + }, + { + "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865", + "tags": [ + "vendor-advisory" + ] } ], "metrics": [ diff --git a/data/2026/111xxx/CVE-2026-111435.json b/data/2026/111xxx/CVE-2026-111435.json index 4dd2d26970..0a8a677cf9 100644 --- a/data/2026/111xxx/CVE-2026-111435.json +++ b/data/2026/111xxx/CVE-2026-111435.json @@ -8,14 +8,14 @@ "assignerShortName": "openEuler", "dateReserved": "2026-10-16T02:50:14.526Z", "datePublished": "2026-11-12T03:50:03.418Z", - "dateUpdated": "2026-11-12T03:50:03.418Z" + "dateUpdated": "2026-11-12T09:16:23.711Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "7e1ac599-2767-43fa-b3ea-f10178cc98f2", "shortName": "openEuler", - "dateUpdated": "2026-11-12T03:50:03.418Z" + "dateUpdated": "2026-11-12T09:16:23.711Z" }, "problemTypes": [ { @@ -78,6 +78,12 @@ "tags": [ "patch" ] + }, + { + "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865", + "tags": [ + "vendor-advisory" + ] } ], "metrics": [ diff --git a/data/2026/111xxx/CVE-2026-111436.json b/data/2026/111xxx/CVE-2026-111436.json index e49a3602fd..4294d7cc89 100644 --- a/data/2026/111xxx/CVE-2026-111436.json +++ b/data/2026/111xxx/CVE-2026-111436.json @@ -8,14 +8,14 @@ "assignerShortName": "openEuler", "dateReserved": "2026-10-16T02:50:14.526Z", "datePublished": "2026-11-12T03:54:18.983Z", - "dateUpdated": "2026-11-12T03:54:18.983Z" + "dateUpdated": "2026-11-12T09:16:49.389Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "7e1ac599-2767-43fa-b3ea-f10178cc98f2", "shortName": "openEuler", - "dateUpdated": "2026-11-12T03:54:18.983Z" + "dateUpdated": "2026-11-12T09:16:49.389Z" }, "problemTypes": [ { @@ -68,10 +68,22 @@ ], "references": [ { - "url": "https://atomgit.com/src-openeuler/iSulad/pull/812" + "url": "https://atomgit.com/src-openeuler/iSulad/pull/812", + "tags": [ + "patch" + ] }, { - "url": "https://atomgit.com/openeuler/iSulad/commit/d48130e6d16d603a9c12333b03bd74d63891ab87?ref=master&prId=2651" + "url": "https://atomgit.com/openeuler/iSulad/commit/d48130e6d16d603a9c12333b03bd74d63891ab87?ref=master&prId=2651", + "tags": [ + "patch" + ] + }, + { + "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865", + "tags": [ + "vendor-advisory" + ] } ], "metrics": [ diff --git a/data/2026/126xxx/CVE-2026-126642.json b/data/2026/126xxx/CVE-2026-126642.json new file mode 100644 index 0000000000..dcf4c7985d --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126642.json @@ -0,0 +1,161 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126642", + "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", + "state": "PUBLISHED", + "assignerShortName": "redhat", + "dateReserved": "2026-11-11T10:46:47.354Z", + "datePublished": "2026-11-12T08:29:21.412Z", + "dateUpdated": "2026-11-12T08:29:21.412Z" + }, + "containers": { + "cna": { + "title": "Awx: webhook credential assignment omits use_role check, exposing another user's token", + "metrics": [ + { + "other": { + "content": { + "value": "Moderate", + "namespace": "https://access.redhat.com/security/updates/classification/" + }, + "type": "Red Hat severity rating" + } + }, + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "privilegesRequired": "LOW", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "version": "3.1" + }, + "format": "CVSS" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation Platform. The API access classes for JobTemplate and WorkflowJobTemplate do not check the caller's Credential use_role when assigning the single-valued webhook_credential foreign key: JobTemplateAccess.can_add/can_change and WorkflowJobTemplateAccess.can_change in awx/main/access.py omit the check_related('webhook_credential', Credential, ..., role_field='use_role') call that UnifiedCredentialsMixin.can_attach performs for the normal many-to-many credentials relationship, and the serializer validates only the credential's type and namespace. A user who may administer their own job template (or workflow job template) and use its project and inventory can therefore attach a webhook token credential (for example a GitLab token) that they do not have use permission on. The template administrator can retrieve the template's webhook key; a subsequent webhook event causes AWX to decrypt the attached token and send it in the request header (for GitLab, PRIVATE-TOKEN) to a status URL derived from the event payload, disclosing the victim's token to a destination the attacker can influence. This may disclose another user's personal access token and allow whatever actions that token permits." + } + ], + "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Ansible Automation Platform 2", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "ansible-automation-platform-24/controller-rhel8", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:ansible_automation_platform:2" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Ansible Automation Platform 2", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "ansible-automation-platform-25/controller-rhel8", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:ansible_automation_platform:2" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Ansible Automation Platform 2", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "ansible-automation-platform-26/controller-rhel9", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:ansible_automation_platform:2" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Ansible Automation Platform 2", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "ansible-automation-platform-27/controller-rhel9", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:ansible_automation_platform:2" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Ansible Automation Platform 2", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "automation-controller", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:ansible_automation_platform:2" + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2026-126642", + "tags": [ + "vdb-entry", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571729", + "name": "RHBZ#2571729", + "tags": [ + "issue-tracking", + "x_refsource_REDHAT" + ] + } + ], + "datePublic": "2026-11-11T14:23:35.753Z", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "x_redhatCweChain": "CWE-862: Missing Authorization", + "workarounds": [ + { + "lang": "en", + "value": "Grant the Job Template and Workflow Job Template administrator role only to trusted users, and avoid storing webhook token credentials in organizations where untrusted users hold template-admin rights. There is no complete configuration-only mitigation; apply the fix when it becomes available." + } + ], + "timeline": [ + { + "lang": "en", + "time": "2026-11-11T14:22:58.578Z", + "value": "Reported to Red Hat." + }, + { + "lang": "en", + "time": "2026-11-11T14:23:35.753Z", + "value": "Made public." + } + ], + "providerMetadata": { + "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", + "shortName": "redhat", + "dateUpdated": "2026-11-12T08:29:21.412Z" + }, + "x_generator": { + "engine": "cvelib 1.8.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/90xxx/CVE-2026-90908.json b/data/2026/90xxx/CVE-2026-90908.json new file mode 100644 index 0000000000..b90c9fb0d0 --- /dev/null +++ b/data/2026/90xxx/CVE-2026-90908.json @@ -0,0 +1,212 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-90908", + "assignerOrgId": "769c9ae7-73c3-4e47-ae19-903170fc3eb8", + "state": "PUBLISHED", + "assignerShortName": "Payara", + "dateReserved": "2026-09-14T10:40:08.296Z", + "datePublished": "2026-11-12T08:53:29.043Z", + "dateUpdated": "2026-11-12T08:53:29.043Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "769c9ae7-73c3-4e47-ae19-903170fc3eb8", + "shortName": "Payara", + "dateUpdated": "2026-11-12T08:53:29.043Z" + }, + "title": "Azul Payara JMX/RMI Remote Authentication Bypass Leading to Remote Code Execution via GenericAdminAuthenticator", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-807", + "description": "CWE-807: Reliance on Untrusted Inputs in a Security Decision", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Azul Payara", + "product": "Payara Server", + "versions": [ + { + "status": "affected", + "version": "7.0.0", + "lessThan": "7.6.0", + "versionType": "semver" + }, + { + "status": "affected", + "version": "7.2024.1.Alpha1", + "lessThan": "7.2026.11", + "versionType": "custom" + }, + { + "status": "affected", + "version": "6.0.0", + "lessThan": "6.44.0", + "versionType": "semver" + }, + { + "status": "affected", + "version": "6.2022.1", + "lessThanOrEqual": "6.2025.11", + "versionType": "custom" + }, + { + "status": "affected", + "version": "5.20.0", + "lessThan": "5.93.0", + "versionType": "semver" + }, + { + "status": "affected", + "version": "5.181", + "lessThanOrEqual": "5.201.2", + "versionType": "custom" + }, + { + "status": "affected", + "version": "5.2020.2", + "lessThanOrEqual": "5.2022.5", + "versionType": "custom" + }, + { + "status": "affected", + "version": "4.1.2.191", + "lessThan": "4.1.2.191.61", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Azul Payara", + "product": "Payara Micro", + "versions": [ + { + "status": "affected", + "version": "7.0.0", + "lessThan": "7.6.0", + "versionType": "semver" + }, + { + "status": "affected", + "version": "7.2024.1.Alpha1", + "lessThan": "7.2026.11", + "versionType": "custom" + }, + { + "status": "affected", + "version": "6.0.0", + "lessThan": "6.44.0", + "versionType": "semver" + }, + { + "status": "affected", + "version": "6.2022.1", + "lessThanOrEqual": "6.2025.11", + "versionType": "custom" + }, + { + "status": "affected", + "version": "5.20.0", + "lessThan": "5.93.0", + "versionType": "semver" + }, + { + "status": "affected", + "version": "5.181", + "lessThanOrEqual": "5.201.2", + "versionType": "custom" + }, + { + "status": "affected", + "version": "5.2020.2", + "lessThanOrEqual": "5.2022.5", + "versionType": "custom" + }, + { + "status": "affected", + "version": "4.1.1.154.1", + "lessThan": "4.1.2.191.61", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability in the GenericAdminAuthenticator component of Azul Payara Server and Azul Payara Micro allows a remote, unauthenticated attacker to bypass JMX/RMI administrative access restrictions by spoofing the client host address. Successful exploitation can grant administrative access to the MBean server and lead to remote code execution. Azul Payara Micro is affected only when its JMX connector is enabled.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

A vulnerability in the GenericAdminAuthenticator component of Azul Payara Server and Azul Payara Micro allows a remote, unauthenticated attacker to bypass JMX/RMI administrative access restrictions by spoofing the client host address. Successful exploitation can grant administrative access to the MBean server and lead to remote code execution. Azul Payara Micro is affected only when its JMX connector is enabled.

" + } + ] + } + ], + "references": [ + { + "url": "https://docs.azul.com/payara/version/4/release-notes/release-notes-4.1.2.191.61.html" + }, + { + "url": "https://docs.azul.com/payara/version/5/release-notes/release-notes-5.93.0.html" + }, + { + "url": "https://docs.azul.com/payara/version/6/release-notes/release-notes-6.44.0.html" + }, + { + "url": "https://docs.azul.com/payara/release-notes/release-notes-7.6.0.html" + }, + { + "url": "https://docs.azul.com/payara-community/release-notes/release-notes-7.2026.11.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "CRITICAL", + "baseScore": 9.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index a06b8d52a2..46f1ec253e 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,19 +1,31 @@ { - "fetchTime": "2026-11-12T08:02:44.550Z", - "numberOfChanges": 2, + "fetchTime": "2026-11-12T09:17:47.935Z", + "numberOfChanges": 4, "new": [], "updated": [ { - "cveId": "CVE-2026-8332", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8332", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8332.json", - "dateUpdated": "2026-11-12T07:56:57.877Z" + "cveId": "CVE-2026-111433", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111433", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111433.json", + "dateUpdated": "2026-11-12T09:15:38.969Z" }, { - "cveId": "CVE-2026-8333", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8333", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8333.json", - "dateUpdated": "2026-11-12T07:57:16.590Z" + "cveId": "CVE-2026-111434", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111434", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111434.json", + "dateUpdated": "2026-11-12T09:16:02.029Z" + }, + { + "cveId": "CVE-2026-111435", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111435", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111435.json", + "dateUpdated": "2026-11-12T09:16:23.711Z" + }, + { + "cveId": "CVE-2026-111436", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111436", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111436.json", + "dateUpdated": "2026-11-12T09:16:49.389Z" } ], "error": [] diff --git a/data/deltaLog.json b/data/deltaLog.json index 3ee52992db..66f4efb261 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,78 @@ [ + { + "fetchTime": "2026-11-12T09:17:47.935Z", + "numberOfChanges": 4, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-111433", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111433", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111433.json", + "dateUpdated": "2026-11-12T09:15:38.969Z" + }, + { + "cveId": "CVE-2026-111434", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111434", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111434.json", + "dateUpdated": "2026-11-12T09:16:02.029Z" + }, + { + "cveId": "CVE-2026-111435", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111435", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111435.json", + "dateUpdated": "2026-11-12T09:16:23.711Z" + }, + { + "cveId": "CVE-2026-111436", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111436", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111436.json", + "dateUpdated": "2026-11-12T09:16:49.389Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T08:57:59.649Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-90908", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90908", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90908.json", + "dateUpdated": "2026-11-12T08:53:29.043Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-12T08:46:07.164Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-110003", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110003", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110003.json", + "dateUpdated": "2026-11-12T08:43:19.548Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-12T08:33:54.169Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-126642", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126642", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126642.json", + "dateUpdated": "2026-11-12T08:29:21.412Z" + } + ], + "updated": [], + "error": [] + }, { "fetchTime": "2026-11-12T08:02:44.550Z", "numberOfChanges": 2, @@ -848357,264 +848431,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-13T09:04:32.347Z", - "numberOfChanges": 15, - "new": [ - { - "cveId": "CVE-2026-106598", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106598", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106598.json", - "dateUpdated": "2026-10-13T08:49:45.469Z" - }, - { - "cveId": "CVE-2026-108487", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108487", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108487.json", - "dateUpdated": "2026-10-13T08:51:49.229Z" - }, - { - "cveId": "CVE-2026-109143", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109143", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109143.json", - "dateUpdated": "2026-10-13T09:00:16.315Z" - }, - { - "cveId": "CVE-2026-109687", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109687", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109687.json", - "dateUpdated": "2026-10-13T08:49:08.081Z" - }, - { - "cveId": "CVE-2026-109699", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109699", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109699.json", - "dateUpdated": "2026-10-13T08:54:05.782Z" - } - ], - "updated": [ - { - "cveId": "CVE-2025-6170", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-6170", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/6xxx/CVE-2025-6170.json", - "dateUpdated": "2026-10-13T08:57:56.813Z" - }, - { - "cveId": "CVE-2026-14164", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-14164", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14164.json", - "dateUpdated": "2026-10-13T08:52:39.053Z" - }, - { - "cveId": "CVE-2026-15588", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-15588", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15588.json", - "dateUpdated": "2026-10-13T08:48:03.668Z" - }, - { - "cveId": "CVE-2026-16118", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16118", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16118.json", - "dateUpdated": "2026-10-13T08:48:08.330Z" - }, - { - "cveId": "CVE-2026-58010", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58010", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58010.json", - "dateUpdated": "2026-10-13T08:48:28.813Z" - }, - { - "cveId": "CVE-2026-58011", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58011", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58011.json", - "dateUpdated": "2026-10-13T08:48:34.471Z" - }, - { - "cveId": "CVE-2026-58012", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58012", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58012.json", - "dateUpdated": "2026-10-13T08:48:38.395Z" - }, - { - "cveId": "CVE-2026-58013", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58013", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58013.json", - "dateUpdated": "2026-10-13T08:48:43.999Z" - }, - { - "cveId": "CVE-2026-58014", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58014", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58014.json", - "dateUpdated": "2026-10-13T08:48:47.287Z" - }, - { - "cveId": "CVE-2026-58015", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58015", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58015.json", - "dateUpdated": "2026-10-13T08:48:50.186Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-13T08:47:39.878Z", - "numberOfChanges": 22, - "new": [ - { - "cveId": "CVE-2026-101020", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101020", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101020.json", - "dateUpdated": "2026-10-13T08:40:15.589Z" - }, - { - "cveId": "CVE-2026-103076", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103076", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103076.json", - "dateUpdated": "2026-10-13T08:43:08.023Z" - }, - { - "cveId": "CVE-2026-105881", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105881", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105881.json", - "dateUpdated": "2026-10-13T08:45:21.994Z" - }, - { - "cveId": "CVE-2026-106597", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106597", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106597.json", - "dateUpdated": "2026-10-13T08:43:04.566Z" - }, - { - "cveId": "CVE-2026-108174", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108174", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108174.json", - "dateUpdated": "2026-10-13T08:42:36.216Z" - }, - { - "cveId": "CVE-2026-108179", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108179", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108179.json", - "dateUpdated": "2026-10-13T08:44:43.236Z" - }, - { - "cveId": "CVE-2026-108488", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108488", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108488.json", - "dateUpdated": "2026-10-13T08:39:45.556Z" - }, - { - "cveId": "CVE-2026-108489", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108489", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108489.json", - "dateUpdated": "2026-10-13T08:43:52.131Z" - }, - { - "cveId": "CVE-2026-108490", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108490", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108490.json", - "dateUpdated": "2026-10-13T08:35:52.601Z" - }, - { - "cveId": "CVE-2026-108492", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108492", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108492.json", - "dateUpdated": "2026-10-13T08:29:28.412Z" - }, - { - "cveId": "CVE-2026-108493", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108493", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108493.json", - "dateUpdated": "2026-10-13T08:32:31.037Z" - }, - { - "cveId": "CVE-2026-108495", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108495", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108495.json", - "dateUpdated": "2026-10-13T08:30:26.406Z" - }, - { - "cveId": "CVE-2026-108496", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108496", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108496.json", - "dateUpdated": "2026-10-13T08:34:21.216Z" - }, - { - "cveId": "CVE-2026-109115", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109115", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109115.json", - "dateUpdated": "2026-10-13T08:30:17.607Z" - }, - { - "cveId": "CVE-2026-109116", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109116", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109116.json", - "dateUpdated": "2026-10-13T08:45:14.522Z" - }, - { - "cveId": "CVE-2026-109684", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109684", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109684.json", - "dateUpdated": "2026-10-13T08:34:35.286Z" - }, - { - "cveId": "CVE-2026-109691", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109691", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109691.json", - "dateUpdated": "2026-10-13T08:40:19.381Z" - }, - { - "cveId": "CVE-2026-109696", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109696", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109696.json", - "dateUpdated": "2026-10-13T08:37:20.683Z" - }, - { - "cveId": "CVE-2026-109697", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109697", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109697.json", - "dateUpdated": "2026-10-13T08:41:17.716Z" - }, - { - "cveId": "CVE-2026-13138", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13138", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13138.json", - "dateUpdated": "2026-10-13T08:37:46.919Z" - }, - { - "cveId": "CVE-2026-89309", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89309", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89309.json", - "dateUpdated": "2026-10-13T08:43:36.290Z" - }, - { - "cveId": "CVE-2026-96535", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96535", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96535.json", - "dateUpdated": "2026-10-13T08:41:05.153Z" - } - ], - "updated": [], - "error": [] - }, - { - "fetchTime": "2026-10-13T08:16:47.712Z", - "numberOfChanges": 2, - "new": [ - { - "cveId": "CVE-2026-109110", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109110", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109110.json", - "dateUpdated": "2026-10-13T08:00:15.817Z" - }, - { - "cveId": "CVE-2026-109114", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109114", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109114.json", - "dateUpdated": "2026-10-13T08:15:15.240Z" - } - ], - "updated": [], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 488be0effa..2ad73eb83a 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "285d6ab299169e132670594ad37822419f4d1ca4", + "upstream_commit": "b91a18f7d71b12948b83421991bc9a3c7a9ff3a4", "since_year": 2017, - "records": 331492, - "synced_at_utc": "2026-11-12T08:27:23.697178+00:00" + "records": 331495, + "synced_at_utc": "2026-11-12T09:25:53.952140+00:00" }