From 11707800913f3ad30eb19ab97b4119fa52b43c81 Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Fri, 13 Nov 2026 09:48:19 +0100 Subject: [PATCH] NVD update 2026-11-13T08:48:14Z --- data/2026/CVE-2026-111333.json | 1 + data/2026/CVE-2026-111334.json | 1 + data/2026/CVE-2026-111335.json | 1 + data/2026/CVE-2026-111336.json | 1 + data/2026/CVE-2026-111337.json | 1 + data/2026/CVE-2026-111338.json | 1 + data/2026/CVE-2026-111339.json | 1 + data/2026/CVE-2026-116432.json | 1 + data/2026/CVE-2026-11732.json | 2 +- data/2026/CVE-2026-120033.json | 2 +- data/2026/CVE-2026-120860.json | 1 + data/2026/CVE-2026-120861.json | 1 + data/2026/CVE-2026-120862.json | 1 + data/2026/CVE-2026-120863.json | 1 + data/2026/CVE-2026-128424.json | 1 + data/2026/CVE-2026-128637.json | 1 + data/2026/CVE-2026-59074.json | 1 + data/2026/CVE-2026-59075.json | 1 + data/2026/CVE-2026-59076.json | 1 + data/2026/CVE-2026-59077.json | 1 + data/2026/CVE-2026-59078.json | 1 + data/2026/CVE-2026-59079.json | 1 + data/2026/CVE-2026-59080.json | 1 + data/2026/CVE-2026-59081.json | 1 + state/sync.json | 2 +- 25 files changed, 25 insertions(+), 3 deletions(-) create mode 100644 data/2026/CVE-2026-111333.json create mode 100644 data/2026/CVE-2026-111334.json create mode 100644 data/2026/CVE-2026-111335.json create mode 100644 data/2026/CVE-2026-111336.json create mode 100644 data/2026/CVE-2026-111337.json create mode 100644 data/2026/CVE-2026-111338.json create mode 100644 data/2026/CVE-2026-111339.json create mode 100644 data/2026/CVE-2026-116432.json create mode 100644 data/2026/CVE-2026-120860.json create mode 100644 data/2026/CVE-2026-120861.json create mode 100644 data/2026/CVE-2026-120862.json create mode 100644 data/2026/CVE-2026-120863.json create mode 100644 data/2026/CVE-2026-128424.json create mode 100644 data/2026/CVE-2026-128637.json create mode 100644 data/2026/CVE-2026-59074.json create mode 100644 data/2026/CVE-2026-59075.json create mode 100644 data/2026/CVE-2026-59076.json create mode 100644 data/2026/CVE-2026-59077.json create mode 100644 data/2026/CVE-2026-59078.json create mode 100644 data/2026/CVE-2026-59079.json create mode 100644 data/2026/CVE-2026-59080.json create mode 100644 data/2026/CVE-2026-59081.json diff --git a/data/2026/CVE-2026-111333.json b/data/2026/CVE-2026-111333.json new file mode 100644 index 0000000000..36878d6a34 --- /dev/null +++ b/data/2026/CVE-2026-111333.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"},{"lessThan":"14.1-73.58 FIPS","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-37.293 FIPs and NDcPP","status":"affected","version":"0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"}]}],"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow in an authentication request can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway."}],"id":"CVE-2026-111333","lastModified":"2026-11-13T08:17:15.380","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary"}]},"published":"2026-11-13T08:17:15.380","references":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"}],"sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","vulnStatus":"Received"} diff --git a/data/2026/CVE-2026-111334.json b/data/2026/CVE-2026-111334.json new file mode 100644 index 0000000000..aa2ac88d87 --- /dev/null +++ b/data/2026/CVE-2026-111334.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"},{"lessThan":"14.1-73.58 FIPS","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-37.293 FIPs and NDcPP","status":"affected","version":"0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"}]}],"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway."}],"id":"CVE-2026-111334","lastModified":"2026-11-13T08:17:15.557","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary"}]},"published":"2026-11-13T08:17:15.557","references":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"}],"sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","vulnStatus":"Received"} diff --git a/data/2026/CVE-2026-111335.json b/data/2026/CVE-2026-111335.json new file mode 100644 index 0000000000..7189de7d90 --- /dev/null +++ b/data/2026/CVE-2026-111335.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"},{"lessThan":"14.1-73.58 FIPS","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-37.293 FIPs and NDcPP","status":"affected","version":"0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"}]}],"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper request handling can lead to a denial-of-service / reboot-loop condition in Citrix NetScaler ADC and Citrix NetScaler Gateway."}],"id":"CVE-2026-111335","lastModified":"2026-11-13T08:17:15.683","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary"}]},"published":"2026-11-13T08:17:15.683","references":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"}],"sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","vulnStatus":"Received"} diff --git a/data/2026/CVE-2026-111336.json b/data/2026/CVE-2026-111336.json new file mode 100644 index 0000000000..2f9ced33ae --- /dev/null +++ b/data/2026/CVE-2026-111336.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"},{"lessThan":"14.1-73.58 FIPS","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-37.293 FIPs and NDcPP","status":"affected","version":"0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"}]}],"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow in HTTP/2 handling can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway."}],"id":"CVE-2026-111336","lastModified":"2026-11-13T08:17:15.817","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.3,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary"}]},"published":"2026-11-13T08:17:15.817","references":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"}],"sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","vulnStatus":"Received"} diff --git a/data/2026/CVE-2026-111337.json b/data/2026/CVE-2026-111337.json new file mode 100644 index 0000000000..32f7a38932 --- /dev/null +++ b/data/2026/CVE-2026-111337.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"},{"lessThan":"14.1-73.58 FIPS","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-37.293 FIPs and NDcPP","status":"affected","version":"0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"}]}],"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow in Base64 decoding in advanced policy expressions leading to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway."}],"id":"CVE-2026-111337","lastModified":"2026-11-13T08:17:15.950","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary"}]},"published":"2026-11-13T08:17:15.950","references":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"}],"sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","vulnStatus":"Received"} diff --git a/data/2026/CVE-2026-111338.json b/data/2026/CVE-2026-111338.json new file mode 100644 index 0000000000..57ef7f134a --- /dev/null +++ b/data/2026/CVE-2026-111338.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"},{"lessThan":"14.1-73.58 FIPS","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-37.293 FIPs and NDcPP","status":"affected","version":"0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"}]}],"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Sensitive authentication material written to a log file in Citrix NetScaler ADC and Citrix NetScaler Gateway."}],"id":"CVE-2026-111338","lastModified":"2026-11-13T08:17:16.077","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary"}]},"published":"2026-11-13T08:17:16.077","references":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"}],"sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","vulnStatus":"Received"} diff --git a/data/2026/CVE-2026-111339.json b/data/2026/CVE-2026-111339.json new file mode 100644 index 0000000000..760d801606 --- /dev/null +++ b/data/2026/CVE-2026-111339.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"},{"lessThan":"14.1-73.58 FIPS","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-37.293 FIPs and NDcPP","status":"affected","version":"0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"}]}],"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow in Application Firewall data decompression/inspection can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway."}],"id":"CVE-2026-111339","lastModified":"2026-11-13T08:17:16.220","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary"}]},"published":"2026-11-13T08:17:16.220","references":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"}],"sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","vulnStatus":"Received"} diff --git a/data/2026/CVE-2026-116432.json b/data/2026/CVE-2026-116432.json new file mode 100644 index 0000000000..8840206a1a --- /dev/null +++ b/data/2026/CVE-2026-116432.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PowerScale InsightIQ","vendor":"Dell","versions":[{"lessThan":"6.4.1 or later","status":"affected","version":"0","versionType":"semver"}]}],"source":"security_alert@emc.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure."}],"id":"CVE-2026-116432","lastModified":"2026-11-13T08:17:16.467","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"security_alert@emc.com","type":"Secondary"}]},"published":"2026-11-13T08:17:16.467","references":[{"source":"security_alert@emc.com","url":"https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-532"}],"source":"security_alert@emc.com","type":"Primary"}]} diff --git a/data/2026/CVE-2026-11732.json b/data/2026/CVE-2026-11732.json index f1f5c55b72..43de7bf0d2 100644 --- a/data/2026/CVE-2026-11732.json +++ b/data/2026/CVE-2026-11732.json @@ -1 +1 @@ -{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"CAX30","vendor":"NETGEAR","versions":[{"lessThan":"V2.3.4.12","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RAX30","vendor":"NETGEAR","versions":[{"lessThan":"V1.0.14.108","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RAX5","vendor":"NETGEAR","versions":[{"lessThan":"V1.0.5.34","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RAXE300","vendor":"NETGEAR","versions":[{"lessThan":"V1.0.10.72","status":"affected","version":"0","versionType":"custom"}]}],"source":"a2826606-91e7-4eb6-899e-8484bd4575d5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on."}],"id":"CVE-2026-11732","lastModified":"2026-10-16T14:17:24.213","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"LOW"},"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-11732","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-13T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-10-13T15:17:43.657","references":[{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","url":"https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"},{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","url":"https://www.netgear.com/support/product/cax30/"},{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","url":"https://www.netgear.com/support/product/rax30/"},{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","url":"https://www.netgear.com/support/product/rax5/"},{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","url":"https://www.netgear.com/support/product/raxe300/"}],"sourceIdentifier":"a2826606-91e7-4eb6-899e-8484bd4575d5","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","type":"Secondary"}]} +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"CAX30","vendor":"NETGEAR","versions":[{"lessThan":"V2.3.4.12","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RAX30","vendor":"NETGEAR","versions":[{"lessThan":"V1.0.14.108","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RAX5","vendor":"NETGEAR","versions":[{"lessThan":"V1.0.5.34","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RAXE300","vendor":"NETGEAR","versions":[{"lessThan":"V1.0.10.72","status":"affected","version":"0","versionType":"custom"}]}],"source":"a2826606-91e7-4eb6-899e-8484bd4575d5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker with access to the local network (such as through Wi-Fi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on."}],"id":"CVE-2026-11732","lastModified":"2026-11-13T07:17:19.147","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"LOW"},"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-11732","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-13T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-10-13T15:17:43.657","references":[{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","url":"https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"},{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","url":"https://www.netgear.com/support/product/cax30/"},{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","url":"https://www.netgear.com/support/product/rax30/"},{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","url":"https://www.netgear.com/support/product/rax5/"},{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","url":"https://www.netgear.com/support/product/raxe300/"}],"sourceIdentifier":"a2826606-91e7-4eb6-899e-8484bd4575d5","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","type":"Secondary"}]} diff --git a/data/2026/CVE-2026-120033.json b/data/2026/CVE-2026-120033.json index fe3b7e272c..5545445aa5 100644 --- a/data/2026/CVE-2026-120033.json +++ b/data/2026/CVE-2026-120033.json @@ -1 +1 @@ -{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["bgpd"],"product":"frrouting","programFiles":["bgpd/bgp_fsm.c"],"programRoutines":[{"name":"bgp_event_stop_with_notify"}],"repo":"https://github.com/FRRouting/frr/","vendor":"frrouting","versions":[{"changes":[{"at":"57a7f3eb48837359d6e3ee5ebd4acea8f49320e5","status":"unaffected"}],"lessThan":"*","status":"affected","version":"4967bf6d729d7dd14dff7b672b2fd4afe78a0d86","versionType":"git"}]}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In FRRouting 10.1 and later, bgpd does not correctly close a BGP session when the Send Hold Timer (RFC 9687) expires, i.e. when a neighbor has stopped accepting data from the router for twice the hold time. The connection is closed, but bgpd still considers the session to be up.\n\n\nA BGP neighbor that keeps sending KEEPALIVEs but stops reading from its connection, at a time when the router has a large amount of data to send to it (for example while sending it a full routing table), can cause one of the following:\n\n * If the neighbor announced Graceful Restart support: bgpd crashes shortly after the session is closed (after the neighbor's announced restart time plus one keepalive interval), taking down all BGP sessions on the router. The neighbor can repeat this each time bgpd restarts.\n * Otherwise: the session stays stuck in the Established state. The neighbor's routes stay installed and keep being advertised to other peers, and the neighbor cannot reconnect until an operator runs \"clear bgp \".\n\nThe neighbor does not need to be malicious; an overloaded or stuck peer can trigger the same behavior.\n\n\nRequired configuration: no special configuration is needed. Any BGP neighbor with an established session can trigger the issue under default settings, for example:\n\n router bgp 65001\n neighbor 192.0.2.2 remote-as 65002\n\nGraceful Restart helper mode, which leads to the crash, is enabled by default. With default timers (keepalive 60s, hold time 180s), the session is closed about 6 minutes after the neighbor stops reading."}],"id":"CVE-2026-120033","lastModified":"2026-11-12T22:09:39.233","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"AUTOMATIC","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]},"published":"2026-11-12T19:16:48.393","references":[{"source":"57a55968-44ac-464c-a794-6ba3baad09c4","url":"https://github.com/FRRouting/frr/pull/23945/changes/57a7f3eb48837359d6e3ee5ebd4acea8f49320e5"}],"sourceIdentifier":"57a55968-44ac-464c-a794-6ba3baad09c4","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-372"},{"lang":"en","value":"CWE-617"}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]} +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["bgpd"],"product":"frrouting","programFiles":["bgpd/bgp_fsm.c"],"programRoutines":[{"name":"bgp_event_stop_with_notify"}],"repo":"https://github.com/FRRouting/frr/","vendor":"frrouting","versions":[{"changes":[{"at":"57a7f3eb48837359d6e3ee5ebd4acea8f49320e5","status":"unaffected"}],"lessThan":"*","status":"affected","version":"4967bf6d729d7dd14dff7b672b2fd4afe78a0d86","versionType":"git"}]}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In FRRouting 10.1 and later, bgpd does not correctly close a BGP session when the Send Hold Timer (RFC 9687) expires, i.e. when a neighbor has stopped accepting data from the router for twice the hold time. The connection is closed, but bgpd still considers the session to be up. A BGP neighbor that keeps sending KEEPALIVEs but stops reading from its connection, at a time when the router has a large amount of data to send to it (for example while sending it a full routing table), can trigger this. If the neighbor announced Graceful Restart support, bgpd crashes shortly after the session is closed, taking down all BGP sessions on the router, and the neighbor can repeat this each time bgpd restarts. Otherwise, the session stays stuck in the Established state: the neighbor's routes stay installed and keep being advertised to other peers, and the neighbor cannot reconnect until an operator clears the session manually. The neighbor does not need to be malicious; an overloaded or stuck peer can trigger the same behavior. No special configuration is required: any established BGP neighbor can trigger the issue, and Graceful Restart helper mode, which leads to the crash, is enabled by default."}],"id":"CVE-2026-120033","lastModified":"2026-11-13T07:17:20.477","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"AUTOMATIC","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]},"published":"2026-11-12T19:16:48.393","references":[{"source":"57a55968-44ac-464c-a794-6ba3baad09c4","url":"https://github.com/FRRouting/frr/pull/23945/changes/57a7f3eb48837359d6e3ee5ebd4acea8f49320e5"}],"sourceIdentifier":"57a55968-44ac-464c-a794-6ba3baad09c4","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-372"},{"lang":"en","value":"CWE-617"}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]} diff --git a/data/2026/CVE-2026-120860.json b/data/2026/CVE-2026-120860.json new file mode 100644 index 0000000000..38933a3dab --- /dev/null +++ b/data/2026/CVE-2026-120860.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"},{"lessThan":"14.1-73.58 FIPS","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-37.293 FIPs and NDcPP","status":"affected","version":"0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"}]}],"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway."}],"id":"CVE-2026-120860","lastModified":"2026-11-13T08:17:16.633","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary"}]},"published":"2026-11-13T08:17:16.633","references":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"}],"sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","vulnStatus":"Received"} diff --git a/data/2026/CVE-2026-120861.json b/data/2026/CVE-2026-120861.json new file mode 100644 index 0000000000..9a5d4cbc58 --- /dev/null +++ b/data/2026/CVE-2026-120861.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"},{"lessThan":"14.1-73.58 FIPS","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-37.293 FIPs and NDcPP","status":"affected","version":"0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"}]}],"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow / improper handling in GSLB and geolocation (MEP, static-proximity, config-sync) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler"}],"id":"CVE-2026-120861","lastModified":"2026-11-13T08:17:16.760","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary"}]},"published":"2026-11-13T08:17:16.760","references":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"}],"sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","vulnStatus":"Received"} diff --git a/data/2026/CVE-2026-120862.json b/data/2026/CVE-2026-120862.json new file mode 100644 index 0000000000..9fd878ab80 --- /dev/null +++ b/data/2026/CVE-2026-120862.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"},{"lessThan":"14.1-73.58 FIPS","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-37.293 FIPs and NDcPP","status":"affected","version":"0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"}]}],"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler"}],"id":"CVE-2026-120862","lastModified":"2026-11-13T08:17:16.890","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary"}]},"published":"2026-11-13T08:17:16.890","references":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"}],"sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","vulnStatus":"Received"} diff --git a/data/2026/CVE-2026-120863.json b/data/2026/CVE-2026-120863.json new file mode 100644 index 0000000000..d6610ea675 --- /dev/null +++ b/data/2026/CVE-2026-120863.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NetScaler ADC","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"},{"lessThan":"14.1-73.58 FIPS","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-37.293 FIPs and NDcPP","status":"affected","version":"0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"NetScaler Gateway","vendor":"Citrix","versions":[{"lessThan":"14.1-73.57","status":"affected","version":"0","versionType":"patch"},{"lessThan":"13.1-64.39","status":"affected","version":"0","versionType":"patch"}]}],"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway."}],"id":"CVE-2026-120863","lastModified":"2026-11-13T08:17:17.013","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","type":"Secondary"}]},"published":"2026-11-13T08:17:17.013","references":[{"source":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"}],"sourceIdentifier":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","vulnStatus":"Received"} diff --git a/data/2026/CVE-2026-128424.json b/data/2026/CVE-2026-128424.json new file mode 100644 index 0000000000..546f5a95f2 --- /dev/null +++ b/data/2026/CVE-2026-128424.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:amq_streams:3"],"defaultStatus":"affected","packageName":"kroxylicious-authorizer-acl","product":"streams for Apache Kafka 3","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in Kroxylicious. The ACL authorizer's rules-file parser unquotes `matching /…/` regular-expression literals using the string unquoting rules, which strips every backslash escape. As a result, an allow rule such as `matching /orders\\.v1/` is compiled as the regex `orders.v1`, which also matches unintended names such as `ordersXv1`, and character classes such as `\\d` and `\\w` lose their special meaning. Allow rules written with regex escapes can therefore apply to more resources than the author intended. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource (such as read or write a topic) that should have been denied."}],"id":"CVE-2026-128424","lastModified":"2026-11-13T07:17:20.780","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":3.6,"source":"secalert@redhat.com","type":"Primary"}]},"published":"2026-11-13T07:17:20.610","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-128424"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2572937"},{"source":"secalert@redhat.com","url":"https://github.com/kroxylicious/kroxylicious/issues/5236"},{"source":"secalert@redhat.com","url":"https://github.com/kroxylicious/kroxylicious/pull/5294"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"secalert@redhat.com","type":"Primary"}]} diff --git a/data/2026/CVE-2026-128637.json b/data/2026/CVE-2026-128637.json new file mode 100644 index 0000000000..da49c978cd --- /dev/null +++ b/data/2026/CVE-2026-128637.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:misp:misp-modules:*:*:*:*:*:*:*:*"],"modules":["website"],"product":"misp-modules","programFiles":["website/app/account/account.py"],"repo":"https://github.com/MISP/misp-modules","vendor":"misp","versions":[{"lessThanOrEqual":"3.1.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"5a6e4751-2f3f-4070-9419-94fb35b644e8"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The MISP Modules website component contains an open redirect vulnerability in its login endpoint. The /login route accepted a user-supplied next query parameter and passed it directly to Flask's redirect() function without validating the destination. An attacker could craft a URL such as https://victim-host/login?next=https://attacker.example/phish and deliver it to a user (e.g., via email or a lookalike page). After the user successfully authenticated, the application issued a 302 redirect to the attacker-controlled external URL. This enables phishing attacks where a user, believing they are still on the legitimate MISP Modules site, may enter additional credentials or sensitive information on the attacker's page. It can also be used to obscure the true destination of a link, bypassing user trust in the legitimate domain. The vulnerability requires the victim to interact with the crafted URL and complete a login, but no prior authentication or special configuration is needed on the attacker's side. The affected component is the website sub-project of misp-modules, specifically the account blueprint in website/app/account/account.py. No version boundaries are specified in the patch metadata."}],"id":"CVE-2026-128637","lastModified":"2026-11-13T08:17:17.280","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"5a6e4751-2f3f-4070-9419-94fb35b644e8","type":"Secondary"}],"ssvcV203":[{"source":"5a6e4751-2f3f-4070-9419-94fb35b644e8","ssvcData":{"options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"Supplier","timestamp":"2026-11-13T07:10:51Z","version":"2.0.3"}}]},"published":"2026-11-13T08:17:17.150","references":[{"source":"5a6e4751-2f3f-4070-9419-94fb35b644e8","url":"https://github.com/MISP/misp-modules/commit/d115f00414e761b0b70c8c8671edac681de74a4c"}],"sourceIdentifier":"5a6e4751-2f3f-4070-9419-94fb35b644e8","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-601"}],"source":"5a6e4751-2f3f-4070-9419-94fb35b644e8","type":"Secondary"}]} diff --git a/data/2026/CVE-2026-59074.json b/data/2026/CVE-2026-59074.json new file mode 100644 index 0000000000..02c1f031e7 --- /dev/null +++ b/data/2026/CVE-2026-59074.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Edito CMS","vendor":"Edito","versions":[{"lessThan":"5.10.2607","status":"affected","version":"0","versionType":"semver"}]}],"source":"cvd@cert.pl"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Edito CMS is vulnerable to improper cryptographic signature verification in the JWT refresh logic. An authenticated low-privilege user can submit self-crafted​ ​JWT​ containing​ ​an existing user​ ​identifier and, due to the lack of signature validation,​​  obtain​ ​a ​​valid,​​ fully-signed​​ session ​​token​​ for​​ any ​​account ​​in​ ​the​ ​system. This allows the attacker to impersonate any user, including administrators.\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released."}],"id":"CVE-2026-59074","lastModified":"2026-11-13T08:17:17.347","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cvd@cert.pl","type":"Secondary"}]},"published":"2026-11-13T08:17:17.347","references":[{"source":"cvd@cert.pl","url":"https://cert.pl/posts/2026/11/CVE-2026-59074"},{"source":"cvd@cert.pl","url":"https://www.edito.pl/"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-347"}],"source":"cvd@cert.pl","type":"Primary"}]} diff --git a/data/2026/CVE-2026-59075.json b/data/2026/CVE-2026-59075.json new file mode 100644 index 0000000000..b0a30deb77 --- /dev/null +++ b/data/2026/CVE-2026-59075.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Edito CMS","vendor":"Edito","versions":[{"lessThan":"5.10.2607","status":"affected","version":"0","versionType":"semver"}]}],"source":"cvd@cert.pl"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Edito CMS is vulnerable to Dynamic LINQ injection. Due to improper input validation, an authenticated attacker can inject conditional expressions into the sort parameter of paginated administrative endpoints. Analyzing the returned result order allows the attacker to extract value of any field character by character, leading to potential exposure of sensitive data.\n\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released."}],"id":"CVE-2026-59075","lastModified":"2026-11-13T08:17:17.517","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cvd@cert.pl","type":"Secondary"}]},"published":"2026-11-13T08:17:17.517","references":[{"source":"cvd@cert.pl","url":"https://cert.pl/posts/2026/11/CVE-2026-59074"},{"source":"cvd@cert.pl","url":"https://www.edito.pl/"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-917"}],"source":"cvd@cert.pl","type":"Primary"}]} diff --git a/data/2026/CVE-2026-59076.json b/data/2026/CVE-2026-59076.json new file mode 100644 index 0000000000..2bbf6d2bf5 --- /dev/null +++ b/data/2026/CVE-2026-59076.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Edito CMS","vendor":"Edito","versions":[{"lessThan":"5.10.2607","status":"affected","version":"0","versionType":"semver"}]}],"source":"cvd@cert.pl"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Edito CMS is vulnerable to Stored Cross-Site Scripting (XSS). Due to improper input validation, an authenticated attacker can inject malicious scripts into givenName and surname parameters via the /api/auth/profile endpoint. When an administrator visits the admin changelog logs, the injected script is automatically executed, in his browser.\n\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released."}],"id":"CVE-2026-59076","lastModified":"2026-11-13T08:17:17.653","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cvd@cert.pl","type":"Secondary"}]},"published":"2026-11-13T08:17:17.653","references":[{"source":"cvd@cert.pl","url":"https://cert.pl/posts/2026/11/CVE-2026-59074"},{"source":"cvd@cert.pl","url":"https://www.edito.pl/"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"cvd@cert.pl","type":"Primary"}]} diff --git a/data/2026/CVE-2026-59077.json b/data/2026/CVE-2026-59077.json new file mode 100644 index 0000000000..9b147c92c7 --- /dev/null +++ b/data/2026/CVE-2026-59077.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Edito CMS","vendor":"Edito","versions":[{"lessThan":"5.10.2607","status":"affected","version":"0","versionType":"semver"}]}],"source":"cvd@cert.pl"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Edito CMS is vulnerable to Stored XSS via content parameter in Tiny editor functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when user tries to edit changed entry.\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released."}],"id":"CVE-2026-59077","lastModified":"2026-11-13T08:17:17.793","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cvd@cert.pl","type":"Secondary"}]},"published":"2026-11-13T08:17:17.793","references":[{"source":"cvd@cert.pl","url":"https://cert.pl/posts/2026/11/CVE-2026-59074"},{"source":"cvd@cert.pl","url":"https://www.edito.pl/"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"cvd@cert.pl","type":"Primary"}]} diff --git a/data/2026/CVE-2026-59078.json b/data/2026/CVE-2026-59078.json new file mode 100644 index 0000000000..c43011e774 --- /dev/null +++ b/data/2026/CVE-2026-59078.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Edito CMS","vendor":"Edito","versions":[{"lessThan":"5.10.2607","status":"affected","version":"0","versionType":"semver"}]}],"source":"cvd@cert.pl"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Edito CMS is vulnerable to Stored XSS in avatar upload functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting an URL leading to a edited avatar.\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released."}],"id":"CVE-2026-59078","lastModified":"2026-11-13T08:17:17.933","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cvd@cert.pl","type":"Secondary"}]},"published":"2026-11-13T08:17:17.933","references":[{"source":"cvd@cert.pl","url":"https://cert.pl/posts/2026/11/CVE-2026-59074"},{"source":"cvd@cert.pl","url":"https://www.edito.pl/"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"cvd@cert.pl","type":"Primary"}]} diff --git a/data/2026/CVE-2026-59079.json b/data/2026/CVE-2026-59079.json new file mode 100644 index 0000000000..390712edbc --- /dev/null +++ b/data/2026/CVE-2026-59079.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Edito CMS","vendor":"Edito","versions":[{"lessThan":"5.10.2607","status":"affected","version":"0","versionType":"semver"}]}],"source":"cvd@cert.pl"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Edito CMS restricts the ability to upload files via the UI to specific file types. However, an avatar upload functionality allows an attacker to upload files of any type and extension without restriction.\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released."}],"id":"CVE-2026-59079","lastModified":"2026-11-13T08:17:18.067","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cvd@cert.pl","type":"Secondary"}]},"published":"2026-11-13T08:17:18.067","references":[{"source":"cvd@cert.pl","url":"https://cert.pl/posts/2026/11/CVE-2026-59074"},{"source":"cvd@cert.pl","url":"https://www.edito.pl/"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-434"}],"source":"cvd@cert.pl","type":"Primary"}]} diff --git a/data/2026/CVE-2026-59080.json b/data/2026/CVE-2026-59080.json new file mode 100644 index 0000000000..017338db16 --- /dev/null +++ b/data/2026/CVE-2026-59080.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"Edito CMS","vendor":"Edito","versions":[{"lessThanOrEqual":"5.10.2607","status":"affected","version":"0","versionType":"semver"}]}],"source":"cvd@cert.pl"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Edito CMS sends JWT token via GET requests. This allows a local attacker with access to browser history to obtain valid JWT token and perform action on behalf of the victim. The token is valid for only short period of time; after that time, it expires and can no longer be used.\n\n\n\nThe vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary."}],"id":"CVE-2026-59080","lastModified":"2026-11-13T08:17:18.210","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":2.1,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cvd@cert.pl","type":"Secondary"}]},"published":"2026-11-13T08:17:18.210","references":[{"source":"cvd@cert.pl","url":"https://cert.pl/posts/2026/11/CVE-2026-59081"},{"source":"cvd@cert.pl","url":"https://www.edito.pl/"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-598"}],"source":"cvd@cert.pl","type":"Primary"}]} diff --git a/data/2026/CVE-2026-59081.json b/data/2026/CVE-2026-59081.json new file mode 100644 index 0000000000..b1dcaef827 --- /dev/null +++ b/data/2026/CVE-2026-59081.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Edito CMS","vendor":"Edito","versions":[{"lessThan":"5.10.2607","status":"affected","version":"0","versionType":"semver"}]}],"source":"cvd@cert.pl"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Edito CMS deserializes JSON data without further validation. A user (even an administrator) cannot exploit this vulnerability through the application's normal functionality. An attacker who could modify cache entries or inject them could execute code on the server.\n\n\n\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released."}],"id":"CVE-2026-59081","lastModified":"2026-11-13T08:17:18.353","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.4,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cvd@cert.pl","type":"Secondary"}]},"published":"2026-11-13T08:17:18.353","references":[{"source":"cvd@cert.pl","url":"https://cert.pl/posts/2026/07/CVE-2026-59081"},{"source":"cvd@cert.pl","url":"https://www.edito.pl/"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"cvd@cert.pl","type":"Primary"}]} diff --git a/state/sync.json b/state/sync.json index 7adaa7ffba..232552352e 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1 +1 @@ -{"initial_complete":true,"last_run_counts":{"seen":4889,"skipped":39,"unchanged":4604,"written":246},"last_run_mode":"incremental","last_successful_end":"2026-11-13T06:42:23+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-13T06:48:49.072605+00:00"} +{"initial_complete":true,"last_run_counts":{"seen":4803,"skipped":39,"unchanged":4740,"written":24},"last_run_mode":"incremental","last_successful_end":"2026-11-13T08:42:24+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-13T08:48:03.733802+00:00"}