diff --git a/data/2026/CVE-2026-106133.json b/data/2026/CVE-2026-106133.json
new file mode 100644
index 0000000000..0571215652
--- /dev/null
+++ b/data/2026/CVE-2026-106133.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Telerik Report Server","vendor":"Progress Software","versions":[{"lessThan":"12.3.26.1110","status":"affected","version":"0","versionType":"custom"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web Report Designer allows an authenticated attacker with low privileges to perform unauthorized operations on shared report resources, affecting their integrity and availability."}],"id":"CVE-2026-106133","lastModified":"2026-11-11T18:18:24.023","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.4,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-11T18:18:24.023","references":[{"source":"security@progress.com","url":"https://www.telerik.com/report-server/documentation/knowledge-base/kb-security-incorrect-authorization-cve-2026-106133"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"security@progress.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-106137.json b/data/2026/CVE-2026-106137.json
new file mode 100644
index 0000000000..aa02b88966
--- /dev/null
+++ b/data/2026/CVE-2026-106137.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Telerik UI for ASP.NET MVC","vendor":"Progress Software","versions":[{"lessThan":"2026.3.1015","status":"affected","version":"2012.2.710","versionType":"custom"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and insertion are not atomic, and case variations in aggregate descriptors can produce distinct retained types even though member resolution is case-insensitive. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication, by submitting concurrent or repeated crafted requests. These requests may corrupt dictionary state or increase CPU and memory use, potentially degrading availability. The issue is fixed in version `2026.3.1015`."}],"id":"CVE-2026-106137","lastModified":"2026-11-11T18:18:24.160","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-11T18:18:24.160","references":[{"source":"security@progress.com","url":"https://www.telerik.com/aspnet-mvc/documentation/knowledge-base/kb-security-class-factory-cve-2026-106137"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"},{"lang":"en","value":"CWE-401"}],"source":"security@progress.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-106152.json b/data/2026/CVE-2026-106152.json
new file mode 100644
index 0000000000..b90a1c9b51
--- /dev/null
+++ b/data/2026/CVE-2026-106152.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Telerik Report Server","vendor":"Progress Software","versions":[{"lessThan":"12.3.26.1110","status":"affected","version":"0","versionType":"custom"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a system configuration setting vulnerability allows an unauthenticated remote attacker to influence the server address used by Report Server when generating links and notifications. With user interaction, this can lead to disclosure of sensitive information and account takeover."}],"id":"CVE-2026-106152","lastModified":"2026-11-11T18:18:24.290","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-11T18:18:24.290","references":[{"source":"security@progress.com","url":"https://www.telerik.com/report-server/documentation/knowledge-base/kb-security-external-control-of-system-or-configuration-setting-cve-2026-106152"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-15"}],"source":"security@progress.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-106156.json b/data/2026/CVE-2026-106156.json
new file mode 100644
index 0000000000..188726c66a
--- /dev/null
+++ b/data/2026/CVE-2026-106156.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Telerik UI for ASP.NET Core","vendor":"Progress Software","versions":[{"lessThan":"2026.3.1015","status":"affected","version":"2015.1.318","versionType":"custom"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.811`, repeated server-side aggregation requests, with or without grouping, cause dynamic assemblies and load contexts to be retained, resulting in accumulating process memory consumption. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication. Repeated requests can cause memory growth that may exhaust available resources and affect application availability. Disabling grouping in the client-side interface does not prevent direct requests containing these descriptors. The issue is fixed in version `2026.3.1015`."}],"id":"CVE-2026-106156","lastModified":"2026-11-11T18:18:24.423","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-11T18:18:24.423","references":[{"source":"security@progress.com","url":"https://www.telerik.com/aspnet-core-ui/documentation/knowledge-base/kb-security-uncontrolled-resource-consumption-cve-2026-106156"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"security@progress.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-107247.json b/data/2026/CVE-2026-107247.json
new file mode 100644
index 0000000000..cc8f043264
--- /dev/null
+++ b/data/2026/CVE-2026-107247.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"6.0.0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass in Revive Adserver 6.0.0 through 6.0.8 allows an authenticated manager restricted to one agency to access or modify resources belonging to another agency. Global input registration gives GET parameters precedence over POST parameters, while submitted administration forms use POST values. By supplying authorized object identifiers in the query string and different identifiers in the POST body, an attacker can cause permission checks and subsequent operations to target different objects. This permits unauthorized cross-agency changes, campaign ownership reassignment and disclosure of campaign and banner data. The regression was introduced in commit 156dee7bc3283c128f35e5a31bb305054cc8de1b and is fixed in Revive Adserver 6.0.9 by restoring POST precedence in global input registration."}],"id":"CVE-2026-107247","lastModified":"2026-11-11T18:18:24.560","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:18:24.560","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3831102"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-107662.json b/data/2026/CVE-2026-107662.json
new file mode 100644
index 0000000000..442071be00
--- /dev/null
+++ b/data/2026/CVE-2026-107662.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to extract arbitrary database values through the banner-zone.php and campaign-zone.php administration pages. Permission checks and database queries obtain identifiers through inconsistent request-input precedence, allowing an authorized numeric identifier to pass validation while a different, attacker-controlled value reaches an SQL query. Extracted data can include password hashes and active session identifiers. Reusing an unexpired administrator session can grant administrative access, allowing modification of configuration and disruption of ad delivery. The issue is fixed in Revive Adserver 6.0.9 by consistently selecting POST values before GET values in both global input registration and common input helpers, and excluding cookies from these helpers. Both commits e301dbbb7 and 0aa9d0124 are required for the complete correction."}],"id":"CVE-2026-107662","lastModified":"2026-11-11T18:18:24.690","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:18:24.690","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3896779"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-108558.json b/data/2026/CVE-2026-108558.json
new file mode 100644
index 0000000000..e26b23c64e
--- /dev/null
+++ b/data/2026/CVE-2026-108558.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A reflected cross-site scripting vulnerability in the conversion-statistics pages of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in an authenticated user's browser by persuading them to visit a crafted URL. An incorrect ownership check validates the advertiser identifier instead of the supplied website identifier, allowing malicious website input to reach HTML output without appropriate encoding. A related output issue affects the hour parameter. The issue is fixed in Revive Adserver 6.0.9 by validating the correct website identifier and normalising the hour parameter before formatting."}],"id":"CVE-2026-108558","lastModified":"2026-11-11T18:18:26.227","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:18:26.227","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3878649"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-108559.json b/data/2026/CVE-2026-108559.json
new file mode 100644
index 0000000000..887b728a49
--- /dev/null
+++ b/data/2026/CVE-2026-108559.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A reflected cross-site scripting vulnerability in the iframe invocation options of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in an authenticated user's browser by persuading them to visit a crafted URL. When generating invocation tags for an any-size zone, the frame_width and frame_height request parameters are included in HTML attributes without appropriate encoding. The issue is fixed in Revive Adserver 6.0.9 by HTML-encoding the affected values in the invocation-option form fields."}],"id":"CVE-2026-108559","lastModified":"2026-11-11T18:18:26.370","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:18:26.370","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3908050"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-108560.json b/data/2026/CVE-2026-108560.json
new file mode 100644
index 0000000000..da696e2356
--- /dev/null
+++ b/data/2026/CVE-2026-108560.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A reflected cross-site scripting vulnerability in updates-history.php in Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in a victim's browser by persuading them to visit a crafted URL. Attacker-controlled values are included in XML command attributes without appropriate encoding, allowing injection of executable XHTML into the response. The preliminary session check omits GET xajax requests, exposing an unauthenticated attack path, while authenticated administrator requests also reach the unsafe output. The issue is fixed in Revive Adserver 6.0.9 by applying the session check to both GET and POST requests and encoding XML command attribute values in both response serializers."}],"id":"CVE-2026-108560","lastModified":"2026-11-11T18:18:26.497","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:18:26.497","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/4075098"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-108561.json b/data/2026/CVE-2026-108561.json
new file mode 100644
index 0000000000..30d9f5ef11
--- /dev/null
+++ b/data/2026/CVE-2026-108561.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in a victim's browser by persuading them to follow a crafted report URL and complete normal reauthentication. An attacker-controlled period_preset value can be saved in the victim's session and inserted into JavaScript without appropriate encoding. The payload can execute on the initial report view and subsequent report views using the stored defaults. The issue is fixed in Revive Adserver 6.0.9 by applying JSON encoding appropriate for the JavaScript context to date-selection values."}],"id":"CVE-2026-108561","lastModified":"2026-11-11T18:18:26.630","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:18:26.630","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/4116433"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-108562.json b/data/2026/CVE-2026-108562.json
new file mode 100644
index 0000000000..b245413f44
--- /dev/null
+++ b/data/2026/CVE-2026-108562.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A stored cross-site scripting vulnerability in maintenance-appendcode-check.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to execute JavaScript in an administrator's browser. A manager can store a malicious tracker name and cause the tracker to appear in the append-code maintenance results. When an administrator opens the affected maintenance page, the tracker name is included in HTML without appropriate encoding. The issue is fixed in Revive Adserver 6.0.9 by HTML-encoding tracker names when displaying the maintenance results."}],"id":"CVE-2026-108562","lastModified":"2026-11-11T18:18:26.753","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:18:26.753","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3826207"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-108563.json b/data/2026/CVE-2026-108563.json
new file mode 100644
index 0000000000..7208d0cc58
--- /dev/null
+++ b/data/2026/CVE-2026-108563.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Spreadsheet formula injection in conversion-tracking report exports in Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to submit conversion values that are written as formulas instead of text in an XLS workbook. When a user opens the exported report in a spreadsheet application, attacker-supplied formulas can be evaluated. The confirmed impact is formula execution within the workbook; disclosure of information to the attacker has not been established. The issue is fixed in Revive Adserver 6.0.9 by sanitising conversion values before writing them to the affected XLS report sections."}],"id":"CVE-2026-108563","lastModified":"2026-11-11T18:18:26.883","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:18:26.883","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3859000"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-108564.json b/data/2026/CVE-2026-108564.json
new file mode 100644
index 0000000000..f20d6891f7
--- /dev/null
+++ b/data/2026/CVE-2026-108564.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A reflected cross-site scripting vulnerability in the invocation-tag generation interface of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in an authenticated user's browser by persuading them to visit a crafted URL. When Direct Selection is enabled, an attacker-controlled banner identifier can be included in HTML form fields without appropriate encoding. Direct Selection is disabled by default. The issue is fixed in Revive Adserver 6.0.9 by HTML-encoding banner identifier values in the invocation-option form fields."}],"id":"CVE-2026-108564","lastModified":"2026-11-11T18:18:27.023","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":1.6,"impactScore":2.7,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:18:27.023","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3942028"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-108565.json b/data/2026/CVE-2026-108565.json
new file mode 100644
index 0000000000..f02b442d30
--- /dev/null
+++ b/data/2026/CVE-2026-108565.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A reflected cross-site scripting vulnerability in the popup invocation options of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in an authenticated user's browser by persuading them to visit a crafted URL. The top, left, timeout and delay request parameters are included in HTML attributes without appropriate encoding. Exploitation requires an existing popup zone, which can be created through the administrator API but is not offered by the normal zone-creation interface. The issue is fixed in Revive Adserver 6.0.9 by HTML-encoding the affected popup option values."}],"id":"CVE-2026-108565","lastModified":"2026-11-11T18:18:27.147","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":1.6,"impactScore":2.7,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:18:27.147","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3971985"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-110697.json b/data/2026/CVE-2026-110697.json
new file mode 100644
index 0000000000..668250f752
--- /dev/null
+++ b/data/2026/CVE-2026-110697.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_update_service:5"],"defaultStatus":"unaffected","packageName":"openshift-update-service/openshift-update-service-rhel8","product":"Red Hat OpenShift Update Service","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:quay:3"],"defaultStatus":"affected","packageName":"quay/quay-rhel8","product":"Red Hat Quay 3","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:quay:3"],"defaultStatus":"affected","packageName":"quay/quay-rhel9","product":"Red Hat Quay 3","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:quay:5"],"defaultStatus":"affected","packageName":"quay/quay-rhel9","product":"Red Hat Quay 5","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accounts and their decrypted authentication tokens from other tenants' namespaces, leading to cross-tenant credential theft and unauthorized image operations."}],"id":"CVE-2026-110697","lastModified":"2026-11-11T17:17:15.587","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.9,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.1,"impactScore":6.0,"source":"secalert@redhat.com","type":"Primary"}]},"published":"2026-11-11T17:17:14.897","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-110697"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552237"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"secalert@redhat.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-112803.json b/data/2026/CVE-2026-112803.json
index b691133a59..8be098a308 100644
--- a/data/2026/CVE-2026-112803.json
+++ b/data/2026/CVE-2026-112803.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally."}],"id":"CVE-2026-112803","lastModified":"2026-11-11T12:18:40.973","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-112803","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T20:22:15.539860Z","version":"2.0.3"}}]},"published":"2026-11-10T19:18:42.843","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112803"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-424"}],"source":"secure@microsoft.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally."}],"id":"CVE-2026-112803","lastModified":"2026-11-11T18:18:38.010","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-112803","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T20:22:15.539860Z","version":"2.0.3"}}]},"published":"2026-11-10T19:18:42.843","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112803"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis"}
diff --git a/data/2026/CVE-2026-112809.json b/data/2026/CVE-2026-112809.json
index c8cbad8518..1112eb72d0 100644
--- a/data/2026/CVE-2026-112809.json
+++ b/data/2026/CVE-2026-112809.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control in Windows Composite Image File System allows an authorized attacker to disclose information locally."}],"id":"CVE-2026-112809","lastModified":"2026-11-11T12:18:41.687","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-112809","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T20:21:05.582137Z","version":"2.0.3"}}]},"published":"2026-11-10T19:18:45.440","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112809"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-424"}],"source":"secure@microsoft.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control in Windows Composite Image File System allows an authorized attacker to disclose information locally."}],"id":"CVE-2026-112809","lastModified":"2026-11-11T18:18:38.777","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-112809","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T20:21:05.582137Z","version":"2.0.3"}}]},"published":"2026-11-10T19:18:45.440","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112809"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis"}
diff --git a/data/2026/CVE-2026-113843.json b/data/2026/CVE-2026-113843.json
index a245c0e2ed..e9eea55ac9 100644
--- a/data/2026/CVE-2026-113843.json
+++ b/data/2026/CVE-2026-113843.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-113843","lastModified":"2026-11-11T12:18:49.200","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-113843","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T20:07:31.541027Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:05.373","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113843"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"secure@microsoft.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-113843","lastModified":"2026-11-11T18:18:46.097","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-113843","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T20:07:31.541027Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:05.373","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113843"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis"}
diff --git a/data/2026/CVE-2026-116633.json b/data/2026/CVE-2026-116633.json
new file mode 100644
index 0000000000..ed9eb03c0d
--- /dev/null
+++ b/data/2026/CVE-2026-116633.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Idea Tab Pro TB373FU","vendor":"Lenovo","versions":[{"lessThan":"17.5.10.107","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Lenovo Tab One TB305FU","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.324","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Lenovo Tab One TB305XU","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.318","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Lenovo Tab Plus TB351FU","vendor":"Lenovo","versions":[{"lessThan":"TBD","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Lenovo Yoga Tab Plus TB520FU","vendor":"Lenovo","versions":[{"lessThan":"18.5.10.037","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Lenovo Legion Tab 8.8 TB321FU","vendor":"Lenovo","versions":[{"lessThan":"17.5.10.319","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311FU","vendor":"Lenovo","versions":[{"lessThan":"17.5.36.508","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311XU","vendor":"Lenovo","versions":[{"lessThan":"17.5.37.529","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Lenovo Tab K9 TB305FU","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.324","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Lenovo Tab K9 TB305XU","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.318","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 TB336FU","vendor":"Lenovo","versions":[{"lessThan":"17.5.10.348","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Idea Tab/ Tab K11 Gen 2 TB336ZU","vendor":"Lenovo","versions":[{"lessThan":"17.5.10.443","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Yoga Tab TB710FU","vendor":"Lenovo","versions":[{"lessThan":"1.5.04.519","status":"affected","version":"0","versionType":"custom"}]}],"source":"psirt@lenovo.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges."}],"id":"CVE-2026-116633","lastModified":"2026-11-11T17:17:16.180","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.2,"source":"psirt@lenovo.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@lenovo.com","type":"Secondary"}]},"published":"2026-11-11T17:17:16.180","references":[{"source":"psirt@lenovo.com","url":"https://support.lenovo.com/us/en/product_security/LEN-220237"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-926"}],"source":"psirt@lenovo.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-117373.json b/data/2026/CVE-2026-117373.json
new file mode 100644
index 0000000000..b1a68f4ffc
--- /dev/null
+++ b/data/2026/CVE-2026-117373.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Janus WebRTC Server 1.2.3 through 1.4.0 is vulnerable to Directory Traversal. The application accepts a caller supplied media path when an ondemand stream is created. The path is validated only by checking whether it contains one of the audio extensions and is then passed to the file source which opens it. No canonicalization is performed and no directory allowlist is enforced, so an unauthenticated caller can make the server open an arbitrary local file and use it as a media source, with the content delivered to viewers as RTP audio."}],"id":"CVE-2026-117373","lastModified":"2026-11-11T18:19:09.483","metrics":{},"published":"2026-11-11T18:19:09.483","references":[{"source":"cve@mitre.org","url":"https://github.com/meetecho/janus-gateway/pull/3637"},{"source":"cve@mitre.org","url":"https://github.com/meetecho/janus-gateway/pull/3676"},{"source":"cve@mitre.org","url":"https://github.com/meetecho/janus-gateway/releases/tag/v1.4.2"},{"source":"cve@mitre.org","url":"https://github.com/w1n0y/CVE"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Received"}
diff --git a/data/2026/CVE-2026-118108.json b/data/2026/CVE-2026-118108.json
index 57328eef81..c2e800f994 100644
--- a/data/2026/CVE-2026-118108.json
+++ b/data/2026/CVE-2026-118108.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2017 (GDR)","vendor":"Microsoft","versions":[{"lessThan":"14.0.2150.2","status":"affected","version":"14.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2017 for x64-based Systems (CU31)","vendor":"Microsoft","versions":[{"lessThan":"14.0.3570.2","status":"affected","version":"14.0.3006.16","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2019 (GDR)","vendor":"Microsoft","versions":[{"lessThan":"15.0.2210.4","status":"affected","version":"15.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2019 for x64-based Systems (CU32)","vendor":"Microsoft","versions":[{"lessThan":"15.0.4510.2","status":"affected","version":"15.0.4003.23","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2022 (GDR)","vendor":"Microsoft","versions":[{"lessThan":"16.0.1220.3","status":"affected","version":"16.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2022 for x64-based Systems (CU27)","vendor":"Microsoft","versions":[{"lessThan":"16.0.4315.2","status":"affected","version":"16.0.4003.1","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2025 CU10","vendor":"Microsoft","versions":[{"lessThan":"17.0.5045.3","status":"affected","version":"17.0.4006.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2025 for x64-based Systems (GDR)","vendor":"Microsoft","versions":[{"lessThan":"17.0.1155.3","status":"affected","version":"17.0.1050.2","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper authorization in SQL Server allows an authorized attacker to elevate privileges over a network."}],"id":"CVE-2026-118108","lastModified":"2026-11-11T12:18:59.120","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-118108","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:51:25.310657Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:28.967","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118108"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-283"}],"source":"secure@microsoft.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2017 (GDR)","vendor":"Microsoft","versions":[{"lessThan":"14.0.2150.2","status":"affected","version":"14.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2017 for x64-based Systems (CU31)","vendor":"Microsoft","versions":[{"lessThan":"14.0.3570.2","status":"affected","version":"14.0.3006.16","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2019 (GDR)","vendor":"Microsoft","versions":[{"lessThan":"15.0.2210.4","status":"affected","version":"15.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2019 for x64-based Systems (CU32)","vendor":"Microsoft","versions":[{"lessThan":"15.0.4510.2","status":"affected","version":"15.0.4003.23","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2022 (GDR)","vendor":"Microsoft","versions":[{"lessThan":"16.0.1220.3","status":"affected","version":"16.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2022 for x64-based Systems (CU27)","vendor":"Microsoft","versions":[{"lessThan":"16.0.4315.2","status":"affected","version":"16.0.4003.1","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2025 CU10","vendor":"Microsoft","versions":[{"lessThan":"17.0.5045.3","status":"affected","version":"17.0.4006.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Microsoft SQL Server 2025 for x64-based Systems (GDR)","vendor":"Microsoft","versions":[{"lessThan":"17.0.1155.3","status":"affected","version":"17.0.1050.2","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper authorization in SQL Server allows an authorized attacker to elevate privileges over a network."}],"id":"CVE-2026-118108","lastModified":"2026-11-11T18:19:10.043","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-118108","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:51:25.310657Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:28.967","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118108"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"secure@microsoft.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-118208.json b/data/2026/CVE-2026-118208.json
index 1a8010f6db..0aeac20728 100644
--- a/data/2026/CVE-2026-118208.json
+++ b/data/2026/CVE-2026-118208.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["x64-based Systems"],"product":"Microsoft Exchange Server Subscription Edition RTM","vendor":"Microsoft","versions":[{"lessThan":"15.02.2562.057","status":"affected","version":"15.02.0.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network."}],"id":"CVE-2026-118208","lastModified":"2026-11-11T12:19:02.703","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-118208","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:44:20.970413Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:37.800","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118208"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-15"}],"source":"secure@microsoft.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"platforms":["x64-based Systems"],"product":"Microsoft Exchange Server Subscription Edition RTM","vendor":"Microsoft","versions":[{"lessThan":"15.02.2562.057","status":"affected","version":"15.02.0.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network."}],"id":"CVE-2026-118208","lastModified":"2026-11-11T18:19:13.380","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-118208","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:44:20.970413Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:37.800","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118208"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis"}
diff --git a/data/2026/CVE-2026-119233.json b/data/2026/CVE-2026-119233.json
new file mode 100644
index 0000000000..6dfca9c29b
--- /dev/null
+++ b/data/2026/CVE-2026-119233.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"proxygen","vendor":"Facebook","versions":[{"lessThan":"v2026.11.09.00","status":"affected","version":"v0.0.0.0","versionType":"semver"}]}],"source":"cve-assign@fb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"proxygen's HTTP/3 codec buffered an incomplete non-DATA frame, such as a control-stream frame, a frame of an unknown or reserved type, or a HEADERS frame, until its entire declared length had arrived, without limiting that length, and re-scanned all buffered data each time more bytes arrived. A remote, unauthenticated HTTP/3 peer could declare a very large frame and deliver it slowly, causing unbounded memory growth and CPU usage that grows quadratically with the number of fragments, leading to denial of service. This issue affects proxygen versions prior to v2026.11.09.00."}],"id":"CVE-2026-119233","lastModified":"2026-11-11T17:17:16.507","metrics":{},"published":"2026-11-11T17:17:16.390","references":[{"source":"cve-assign@fb.com","url":"https://github.com/meta/proxygen/commit/daf245bba7fe1304b9491403fe56f91153299781"},{"source":"cve-assign@fb.com","url":"https://www.facebook.com/security/advisories/cve-2026-119233"}],"sourceIdentifier":"cve-assign@fb.com","vulnStatus":"Deferred"}
diff --git a/data/2026/CVE-2026-119234.json b/data/2026/CVE-2026-119234.json
new file mode 100644
index 0000000000..ba8683b6ff
--- /dev/null
+++ b/data/2026/CVE-2026-119234.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"mvfst","vendor":"Facebook","versions":[{"lessThan":"v2026.11.09.0","status":"affected","version":"v0.0.0.0","versionType":"semver"}]}],"source":"cve-assign@fb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"mvfst did not adequately merge or compact out-of-order STREAM frame data, and a small received fragment could keep a much larger receive buffer alive. QUIC flow control limits the number of buffered stream bytes, but not this per-fragment memory and bookkeeping. A remote, unauthenticated QUIC peer could send many small, non-contiguous stream fragments to make an endpoint consume memory far in excess of its advertised receive window and spend increasing CPU time reassembling stream data, leading to denial of service. This issue affects mvfst versions prior to v2026.11.09.0."}],"id":"CVE-2026-119234","lastModified":"2026-11-11T17:17:16.543","metrics":{},"published":"2026-11-11T17:17:16.543","references":[{"source":"cve-assign@fb.com","url":"https://github.com/meta/mvfst/commit/7e5cff58e8cbed87793141ceeca0a8a343c67c44"},{"source":"cve-assign@fb.com","url":"https://www.facebook.com/security/advisories/cve-2026-119234"}],"sourceIdentifier":"cve-assign@fb.com","vulnStatus":"Received"}
diff --git a/data/2026/CVE-2026-119235.json b/data/2026/CVE-2026-119235.json
new file mode 100644
index 0000000000..15db1ed865
--- /dev/null
+++ b/data/2026/CVE-2026-119235.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"proxygen","vendor":"Facebook","versions":[{"lessThan":"v2026.11.09.00","status":"affected","version":"v0.0.0.0","versionType":"semver"}]}],"source":"cve-assign@fb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"proxygen's QPACK decoder enforced its size limit on a string literal in an encoder-stream instruction only after the entire literal had been received. A remote, unauthenticated HTTP/3 peer could send an insert instruction on the QPACK encoder stream that declares an arbitrarily large literal and then keep sending data, causing the decoder to buffer it without bound for the lifetime of the connection and exhaust memory, leading to denial of service. The issue occurs regardless of the advertised QPACK dynamic table capacity, including when the dynamic table is disabled. This issue affects proxygen versions prior to v2026.11.09.00."}],"id":"CVE-2026-119235","lastModified":"2026-11-11T17:17:16.760","metrics":{},"published":"2026-11-11T17:17:16.663","references":[{"source":"cve-assign@fb.com","url":"https://github.com/meta/proxygen/commit/daf245bba7fe1304b9491403fe56f91153299781"},{"source":"cve-assign@fb.com","url":"https://www.facebook.com/security/advisories/cve-2026-119235"}],"sourceIdentifier":"cve-assign@fb.com","vulnStatus":"Deferred"}
diff --git a/data/2026/CVE-2026-119236.json b/data/2026/CVE-2026-119236.json
new file mode 100644
index 0000000000..5401729324
--- /dev/null
+++ b/data/2026/CVE-2026-119236.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"mvfst","vendor":"Facebook","versions":[{"lessThan":"v2026.11.09.00","status":"affected","version":"v0.0.0.0","versionType":"semver"}]}],"source":"cve-assign@fb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An mvfst QUIC server retained CRYPTO frame data received at an encryption level (Initial or Handshake) that the TLS handshake had already moved past. Because the transport treated this data as delivered, it did not count against the CRYPTO stream buffer limit. A remote, unauthenticated client could complete a handshake, withhold its acknowledgment of the server's HANDSHAKE_DONE frame so that Handshake keys stay in use, and keep sending Handshake-level CRYPTO data at increasing offsets, causing unbounded memory growth on the server and leading to denial of service. This issue affects mvfst versions prior to v2026.11.09.00."}],"id":"CVE-2026-119236","lastModified":"2026-11-11T17:17:16.800","metrics":{},"published":"2026-11-11T17:17:16.800","references":[{"source":"cve-assign@fb.com","url":"https://github.com/meta/mvfst/commit/7e5cff58e8cbed87793141ceeca0a8a343c67c44"},{"source":"cve-assign@fb.com","url":"https://www.facebook.com/security/advisories/cve-2026-119236"}],"sourceIdentifier":"cve-assign@fb.com","vulnStatus":"Received"}
diff --git a/data/2026/CVE-2026-119237.json b/data/2026/CVE-2026-119237.json
new file mode 100644
index 0000000000..d737d251b3
--- /dev/null
+++ b/data/2026/CVE-2026-119237.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"proxygen","vendor":"Facebook","versions":[{"lessThan":"v2026.11.09.00","status":"affected","version":"v0.0.0.0","versionType":"semver"}]}],"source":"cve-assign@fb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In proxygen's HTTP/3 session, when a HEADERS block referenced QPACK dynamic table entries that had not yet been received, header decoding for that stream was paused, but the session continued to read the stream from the QUIC transport. The unread data bypassed the session's ingress buffer limit, returned flow-control credit to the peer, and was re-scanned in full on every read. With QPACK blocked streams enabled (the default), a remote, unauthenticated HTTP/3 peer could send a HEADERS block that references a dynamic table insert it never sends, followed by a continuous stream of data, causing memory growth until the request timed out and CPU usage that grows quadratically, leading to denial of service. This issue affects proxygen versions prior to v2026.11.09.00."}],"id":"CVE-2026-119237","lastModified":"2026-11-11T17:17:17.017","metrics":{},"published":"2026-11-11T17:17:16.917","references":[{"source":"cve-assign@fb.com","url":"https://github.com/meta/proxygen/commit/daf245bba7fe1304b9491403fe56f91153299781"},{"source":"cve-assign@fb.com","url":"https://www.facebook.com/security/advisories/cve-2026-119237"}],"sourceIdentifier":"cve-assign@fb.com","vulnStatus":"Deferred"}
diff --git a/data/2026/CVE-2026-119238.json b/data/2026/CVE-2026-119238.json
new file mode 100644
index 0000000000..8e6b2926f5
--- /dev/null
+++ b/data/2026/CVE-2026-119238.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"XiangBangbang Application","vendor":"Lenovo","versions":[{"lessThan":"1.0.16","status":"affected","version":"0","versionType":"custom"}]}],"source":"psirt@lenovo.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A potential improper permissions vulnerability was reported in Lenovo XiangBangbang that could allow a local application to perform unauthorized touch gestures."}],"id":"CVE-2026-119238","lastModified":"2026-11-11T17:17:17.057","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":3.3,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":1.4,"source":"psirt@lenovo.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@lenovo.com","type":"Secondary"}]},"published":"2026-11-11T17:17:17.057","references":[{"source":"psirt@lenovo.com","url":"https://iknow.lenovo.com.cn/detail/443047"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-926"}],"source":"psirt@lenovo.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-119723.json b/data/2026/CVE-2026-119723.json
new file mode 100644
index 0000000000..8661540b7d
--- /dev/null
+++ b/data/2026/CVE-2026-119723.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"HHVM","vendor":"Facebook","versions":[{"lessThan":"23c061f4e804a51badd5f85227e65185651253b5","status":"affected","version":"0","versionType":"git"}]}],"source":"cve-assign@fb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested array succeeded before descending into it. A remote, unauthenticated attacker could send a GET or POST request which would crash the HHVM server process before any application code runs, leading to denial of service. This issue affected HHVM prior to 23c061f4e804a51badd5f85227e65185651253b5."}],"id":"CVE-2026-119723","lastModified":"2026-11-11T17:17:17.220","metrics":{},"published":"2026-11-11T17:17:17.220","references":[{"source":"cve-assign@fb.com","url":"https://github.com/meta/hhvm/commit/23c061f4e804a51badd5f85227e65185651253b5"},{"source":"cve-assign@fb.com","url":"https://www.facebook.com/security/advisories/cve-2026-119723"}],"sourceIdentifier":"cve-assign@fb.com","vulnStatus":"Received"}
diff --git a/data/2026/CVE-2026-119832.json b/data/2026/CVE-2026-119832.json
index 941c9b6a5e..33d6d35f08 100644
--- a/data/2026/CVE-2026-119832.json
+++ b/data/2026/CVE-2026-119832.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack."}],"id":"CVE-2026-119832","lastModified":"2026-11-11T12:19:16.827","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":0.7,"impactScore":5.2,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-119832","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:19:22.565437Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:58.670","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119832"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-732"}],"source":"secure@microsoft.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack."}],"id":"CVE-2026-119832","lastModified":"2026-11-11T18:19:24.387","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":0.7,"impactScore":5.2,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-119832","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:19:22.565437Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:58.670","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119832"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis"}
diff --git a/data/2026/CVE-2026-121737.json b/data/2026/CVE-2026-121737.json
new file mode 100644
index 0000000000..0a7768b542
--- /dev/null
+++ b/data/2026/CVE-2026-121737.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"proxygen","vendor":"Facebook","versions":[{"lessThan":"v2026.11.09.00","status":"affected","version":"v0.0.0.0","versionType":"semver"}]}],"source":"cve-assign@fb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"When a remote, unauthenticated HTTP/1.1 client pipelined the start of a second request and then stopped reading, proxygen's coroutine-based HTTP session could free that pipelined stream while resetting the connection's streams on the resulting write timeout, then go on to use it. This can crash the server, leading to denial of service, and may allow memory corruption with further impact. This issue affects proxygen versions prior to v2026.11.09.00."}],"id":"CVE-2026-121737","lastModified":"2026-11-11T17:17:17.430","metrics":{},"published":"2026-11-11T17:17:17.337","references":[{"source":"cve-assign@fb.com","url":"https://github.com/meta/proxygen/commit/daf245bba7fe1304b9491403fe56f91153299781"},{"source":"cve-assign@fb.com","url":"https://www.facebook.com/security/advisories/cve-2026-121737"}],"sourceIdentifier":"cve-assign@fb.com","vulnStatus":"Deferred"}
diff --git a/data/2026/CVE-2026-122043.json b/data/2026/CVE-2026-122043.json
new file mode 100644
index 0000000000..5f850b0ac1
--- /dev/null
+++ b/data/2026/CVE-2026-122043.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"repmgr","programFiles":["dbutils.c","repmgrd-physical.c"],"repo":"https://github.com/EnterpriseDB/repmgr","vendor":"EnterpriseDB","versions":[{"lessThan":"5.5.1","status":"affected","version":"4.0.0","versionType":"custom"}]}],"source":"20be33e2-bf35-4d13-8fad-18bd2f3e3659"}],"cveTags":[],"descriptions":[{"lang":"en","value":"repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability (CWE-78) in event notifications. When event_notification_command is configured, repmgr substitutes the %a (node name), %c (connection string) and %d (details) placeholders into the command and runs it through the shell. %a and %c are inserted without escaping, and %d escapes only double quotes, so shell command substitution still works inside the quoting the documentation recommends. The node name and connection string come from node records in the repmgr.nodes table. An attacker with the credentials of a non-superuser repmgr database user can write a crafted node record and run OS commands, as the operating system user that runs repmgr or repmgrd (usually postgres), on other cluster nodes that process an event using these placeholders. The %a placeholder of failover_validation_command has the same flaw. Deployments whose repmgr database user is a superuser gain no new capability, because a superuser can already run OS commands, and deployments that do not use these placeholders are not affected. The issue is fixed in repmgr 5.5.1. After upgrading, operators must remove any quotes they placed around these placeholders, because a placeholder left inside double quotes is still open to command injection."}],"id":"CVE-2026-122043","lastModified":"2026-11-11T17:17:17.473","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"20be33e2-bf35-4d13-8fad-18bd2f3e3659","type":"Secondary"}]},"published":"2026-11-11T17:17:17.473","references":[{"source":"20be33e2-bf35-4d13-8fad-18bd2f3e3659","url":"https://github.com/EnterpriseDB/repmgr/releases/tag/v5.5.1"},{"source":"20be33e2-bf35-4d13-8fad-18bd2f3e3659","url":"https://www.enterprisedb.com/docs/security/advisories/cve2026122043/"}],"sourceIdentifier":"20be33e2-bf35-4d13-8fad-18bd2f3e3659","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"20be33e2-bf35-4d13-8fad-18bd2f3e3659","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124687.json b/data/2026/CVE-2026-124687.json
new file mode 100644
index 0000000000..f67d27da1c
--- /dev/null
+++ b/data/2026/CVE-2026-124687.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Kendo UI for jQuery","vendor":"Progress Software","versions":[{"lessThan":"2026.4.1111","status":"affected","version":"2022.2.621","versionType":"custom"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress® Kendo® UI for jQuery versions from 2022.2.621 prior to 2026.4.1111 the DropDownButton and SplitButton allow markup injection through the `id` and `target` attributes. An attacker who can influence these item values can break out of the attributes and inject markup, including event handlers. The issue is fixed in 2026.4.1111."}],"id":"CVE-2026-124687","lastModified":"2026-11-11T17:17:17.743","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.7,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-11T17:17:17.630","references":[{"source":"security@progress.com","url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-dropdownbutton-splitbutton-items-attribute-xss-cve-2026-124687"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-80"}],"source":"security@progress.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-124688.json b/data/2026/CVE-2026-124688.json
new file mode 100644
index 0000000000..05b9e08f4e
--- /dev/null
+++ b/data/2026/CVE-2026-124688.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Kendo UI for jQuery","vendor":"Progress Software","versions":[{"lessThan":"2026.4.1111","status":"affected","version":"2012.1.322","versionType":"custom"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress® Kendo® UI for jQuery prior to 2026.4.1111 the TabStrip, PanelBar, and Menu widgets support mapping a dataSource field to `spriteCssClass`. If an attacker can control the mapped data, they can break out of the attribute and inject markup, including event-handler attributes. The resulting JavaScript executes in the application's origin when a victim loads a page that renders the affected widget, allowing access to data and actions available in the victim's authenticated session."}],"id":"CVE-2026-124688","lastModified":"2026-11-11T17:17:17.897","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.7,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-11T17:17:17.783","references":[{"source":"security@progress.com","url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-tabstrip-panelbar-menu-spritecssclass-xss-cve-2026-124688"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-80"}],"source":"security@progress.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-124689.json b/data/2026/CVE-2026-124689.json
new file mode 100644
index 0000000000..8dcc133d58
--- /dev/null
+++ b/data/2026/CVE-2026-124689.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Kendo UI for jQuery","vendor":"Progress Software","versions":[{"lessThan":"2026.4.1110","status":"affected","version":"2026.3.1014","versionType":"custom"},{"status":"unaffected","version":"2026.4.1110"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress Kendo UI for jQuery versions 2026.3.1014 up to, but not including, 2026.4.1110, ActionSheet does not encode title, subtitle, and header button label values before rendering them. An attacker who can influence these values can inject markup that executes as JavaScript when a user opens the ActionSheet. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. The report identifies version 2026.3.1014; the first affected release has not been established."}],"id":"CVE-2026-124689","lastModified":"2026-11-11T17:17:18.043","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.7,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-11T17:17:17.933","references":[{"source":"security@progress.com","url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-kendo-actionsheet-header-xss-cve-2026-124689"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@progress.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-124690.json b/data/2026/CVE-2026-124690.json
new file mode 100644
index 0000000000..29a4a0ff7c
--- /dev/null
+++ b/data/2026/CVE-2026-124690.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Kendo UI for jQuery","vendor":"Progress Software","versions":[{"lessThan":"2026.4.1110","status":"affected","version":"2026.3.1015","versionType":"custom"},{"status":"unaffected","version":"2026.4.1110"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress Kendo UI for jQuery, sanitizeSvgContent() parses custom icon markup into a live DOM before filtering it. An attacker who can influence custom icon content can cause JavaScript to execute during icon creation, before an unsafe element is removed. The issue was reported in version 2026.3.1015; the first affected release has not been established. The issue is fixed in version 2026.4.1110."}],"id":"CVE-2026-124690","lastModified":"2026-11-11T17:17:18.193","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.7,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-11T17:17:18.080","references":[{"source":"security@progress.com","url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-kendo-svg-icon-sanitizer-xss-cve-2026-124690"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@progress.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-124692.json b/data/2026/CVE-2026-124692.json
new file mode 100644
index 0000000000..697c2e4e15
--- /dev/null
+++ b/data/2026/CVE-2026-124692.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Kendo UI for jQuery","vendor":"Progress Software","versions":[{"lessThan":"2026.4.1110","status":"affected","version":"2026.3.1015","versionType":"custom"},{"status":"unaffected","version":"2026.4.1110"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, the Grid and TreeList column-reorder drag clue reparses header text as HTML. An attacker who can influence a column field or title used by an affected application can cause JavaScript to execute when a user drags a column header while column reordering is enabled. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. The first affected release has not been established."}],"id":"CVE-2026-124692","lastModified":"2026-11-11T17:17:18.337","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.7,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-11T17:17:18.227","references":[{"source":"security@progress.com","url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-kendo-grid-treelist-column-reorder-drag-clue-xss-cve-2026-124692"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@progress.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-124693.json b/data/2026/CVE-2026-124693.json
new file mode 100644
index 0000000000..863e88cf8e
--- /dev/null
+++ b/data/2026/CVE-2026-124693.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Kendo UI for jQuery","vendor":"Progress Software","versions":[{"lessThan":"2026.4.1110","status":"affected","version":"2026.3.1015","versionType":"custom"},{"status":"unaffected","version":"2026.4.1110"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, PivotGrid and PivotConfigurator axis field names are passed to a chip template without appropriate encoding. An attacker who can influence an axis field name can cause JavaScript to execute when a user views the rendered chip. The field name can be interpreted as HTML in both attribute and element contexts. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. The first affected release has not been established."}],"id":"CVE-2026-124693","lastModified":"2026-11-11T17:17:18.483","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.7,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-11T17:17:18.370","references":[{"source":"security@progress.com","url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-kendo-pivotgrid-pivotconfigurator-axis-chip-xss-cve-2026-124693"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@progress.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-124694.json b/data/2026/CVE-2026-124694.json
new file mode 100644
index 0000000000..06352eaf01
--- /dev/null
+++ b/data/2026/CVE-2026-124694.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Kendo UI for jQuery","vendor":"Progress Software","versions":[{"lessThan":"2026.4.1110","status":"affected","version":"2026.3.1015","versionType":"custom"},{"status":"unaffected","version":"2026.4.1110"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, PropertyGrid does not encode bound property values and items[].description in its default configuration. An attacker who can influence either value can cause JavaScript to execute when a user views the grid. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. The first affected release has not been established."}],"id":"CVE-2026-124694","lastModified":"2026-11-11T17:17:18.630","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.7,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-11T17:17:18.517","references":[{"source":"security@progress.com","url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-kendo-propertygrid-bound-values-description-xss-cve-2026-124694"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@progress.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-126720.json b/data/2026/CVE-2026-126720.json
new file mode 100644
index 0000000000..cf279ed47f
--- /dev/null
+++ b/data/2026/CVE-2026-126720.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"Rooxis RXR-12","vendor":"Rooxis","versions":[{"status":"affected","version":"0"}]}],"source":"cret@cert.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Rooxis RXR-12 Wi-Fi router contains an unauthenticated remote code execution vulnerability in /usr/bin/cloud_manage, where a server-controlled JSON diagnoseParameter field is passed unsanitized to popen(), enabling arbitrary command execution as root over cleartext HTTP when an attacker is positioned on-path and has access to the hard-coded cloud endpoint. Firmware 20260813_c2169ea5 fixes the vulnerability, and your router can be updated through the local web interface."}],"id":"CVE-2026-126720","lastModified":"2026-11-11T17:17:18.663","metrics":{},"published":"2026-11-11T17:17:18.663","references":[{"source":"cret@cert.org","url":"https://lab.geodesy.phd/writeups/rooxis-router/"},{"source":"cret@cert.org","url":"https://rooxis.com/firmware/SOP-ramips-mt7621-DGR7-ROOXIS-local-debug.bin"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Received"}
diff --git a/data/2026/CVE-2026-126722.json b/data/2026/CVE-2026-126722.json
new file mode 100644
index 0000000000..29661aca65
--- /dev/null
+++ b/data/2026/CVE-2026-126722.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"Rooxis RXR-12","vendor":"Rooxis","versions":[{"lessThan":"20260813_c2169ea5","status":"affected","version":"0","versionType":"custom"}]}],"source":"cret@cert.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon (/usr/bin/telnetd_startup) that, upon receipt of a precomputed AES-128-CBC magic packet using a firmware-wide static key and IV, enables telnet service with default credentials, providing remote root access. Firmware 20260813_c2169ea5 removes the UDP listener entirely, and users can update through their local web interface."}],"id":"CVE-2026-126722","lastModified":"2026-11-11T17:17:18.793","metrics":{},"published":"2026-11-11T17:17:18.793","references":[{"source":"cret@cert.org","url":"https://lab.geodesy.phd/writeups/rooxis-router/"},{"source":"cret@cert.org","url":"https://rooxis.com/firmware/SOP-ramips-mt7621-DGR7-ROOXIS-local-debug.bin"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Received"}
diff --git a/data/2026/CVE-2026-126723.json b/data/2026/CVE-2026-126723.json
new file mode 100644
index 0000000000..06754ba842
--- /dev/null
+++ b/data/2026/CVE-2026-126723.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"Rooxis RXR-12","vendor":"Rooxis","versions":[{"lessThan":"20260813_c2169ea5","status":"affected","version":"0","versionType":"custom"}]}],"source":"cret@cert.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Rooxis RXR-12 Wi-Fi router contains an authenticated command injection vulnerability in the LuCI white_list RPC handler (/usr/lib/lua/luci/data/white_list_plt.lua), where unsanitized user-supplied MAC addresses are concatenated into os.execute() without validation, yielding root command execution via a malformed mac parameter. Firmware 20260813_c2169ea5 fixes the vulnerability, and users can update their router through the local web interface."}],"id":"CVE-2026-126723","lastModified":"2026-11-11T17:17:18.907","metrics":{},"published":"2026-11-11T17:17:18.907","references":[{"source":"cret@cert.org","url":"https://lab.geodesy.phd/writeups/rooxis-router/"},{"source":"cret@cert.org","url":"https://rooxis.com/firmware/SOP-ramips-mt7621-DGR7-ROOXIS-local-debug.bin"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Received"}
diff --git a/data/2026/CVE-2026-126724.json b/data/2026/CVE-2026-126724.json
new file mode 100644
index 0000000000..4925badeb2
--- /dev/null
+++ b/data/2026/CVE-2026-126724.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"Rooxis RXR-12","vendor":"Rooxis","versions":[{"lessThan":"20260813_c2169ea5","status":"affected","version":"0","versionType":"custom"}]}],"source":"cret@cert.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Rooxis RXR-12 Wi-Fi router contains an undocumented UID-0 backdoor account (dg) with a firmware-wide default password (ivanlee) and interactive shell (/bin/ash), allowing authentication as root via SSH or local console without device-specific secrets. Firmware 20260813_c2169ea5 removes the account from the shipped root filesystem and disables root password authentication in SSH. Users can update their router can be through the local web interface."}],"id":"CVE-2026-126724","lastModified":"2026-11-11T17:17:19.053","metrics":{},"published":"2026-11-11T17:17:19.053","references":[{"source":"cret@cert.org","url":"https://lab.geodesy.phd/writeups/rooxis-router/"},{"source":"cret@cert.org","url":"https://rooxis.com/firmware/SOP-ramips-mt7621-DGR7-ROOXIS-local-debug.bin"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Received"}
diff --git a/data/2026/CVE-2026-61619.json b/data/2026/CVE-2026-61619.json
new file mode 100644
index 0000000000..0df9f88d0c
--- /dev/null
+++ b/data/2026/CVE-2026-61619.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"coreruleset","vendor":"coreruleset","versions":[{"status":"affected","version":"< 3.3.10"},{"status":"affected","version":"< 4.25.1"},{"status":"affected","version":"< 4.28.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, regular-expression denial of service (ReDoS) affects a shared regex-assembly include used to build 12 Unix RCE detection rules in CRS v4, and the same ambiguous pattern was present in the manually-assembled regexes in 4 rules in CRS v3.3. With a single, unauthenticated, crafted request, the generated pattern drives PCRE2 past its backtracking limit. When PCRE2 exceeds that limit, the @rx operator returns an error rather than a match result, which results in detection bypass and CPU denial of service. This issue has been patched in versions 3.3.10, 4.25.1, and 4.28.0."}],"id":"CVE-2026-61619","lastModified":"2026-11-11T18:19:47.443","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.8,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-11T18:19:47.443","references":[{"source":"security-advisories@github.com","url":"https://github.com/coreruleset/coreruleset/commit/4665b6d7a79a81aa8a802ef3c901d69491c009a4"},{"source":"security-advisories@github.com","url":"https://github.com/coreruleset/coreruleset/commit/6083611d00291e85ab7b587e96577deb53ed9cac"},{"source":"security-advisories@github.com","url":"https://github.com/coreruleset/coreruleset/commit/e3b612a909532dcc8d056c01ac04b31117b71505"},{"source":"security-advisories@github.com","url":"https://github.com/coreruleset/coreruleset/security/advisories/GHSA-f5qm-3h4p-8qhg"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-1333"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-62971.json b/data/2026/CVE-2026-62971.json
new file mode 100644
index 0000000000..919406dd6c
--- /dev/null
+++ b/data/2026/CVE-2026-62971.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"coreruleset","vendor":"coreruleset","versions":[{"status":"affected","version":"< 3.3.10"},{"status":"affected","version":"< 4.25.1"},{"status":"affected","version":"< 4.28.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 (protocol-attack), 930 (LFI), 931 (RFI), 932 (RCE), 933 (PHP), 934 (generic), 941 (XSS), 942 (SQLi), and 943 (session-fixation) families inspect XML request bodies via the XPath expression XML:/*. That expression matches only element text nodes — it does not match XML attribute values. As a result, an attacker who places an attack payload inside an XML attribute (e.g. <a href=\"javascript:alert(1)=window.name\"></a> or <a value=\"' OR 1=1 --\"></a>) bypasses CRS detection entirely. This is verified empirically against a local CRS test instance and against the public CRS sandbox. The bypass affects approximately 159 rules across 9 rule files and applies at every paranoia level (PL1 through PL4), since the variable list is more or less shared across PLs. The 944 (Java) family is the only one that correctly includes XML://@* in addition to XML:/* and is therefore unaffected. This issue has been patched in versions 3.3.10, 4.25.1, and 4.28.0."}],"id":"CVE-2026-62971","lastModified":"2026-11-11T18:19:47.603","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.7,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-11T18:19:47.603","references":[{"source":"security-advisories@github.com","url":"https://github.com/coreruleset/coreruleset/commit/275d7616f1ceb6f1024c3bfbeb1f4ae2ae9ad010"},{"source":"security-advisories@github.com","url":"https://github.com/coreruleset/coreruleset/commit/635cecf8f81908f02a687db4b5b13a55c3e3b9ed"},{"source":"security-advisories@github.com","url":"https://github.com/coreruleset/coreruleset/commit/852036b6af5e81d60d7234f69137d47f4ecb89dc"},{"source":"security-advisories@github.com","url":"https://github.com/coreruleset/coreruleset/security/advisories/GHSA-6jp8-c2w2-x7wr"},{"source":"security-advisories@github.com","url":"https://github.com/owasp-modsecurity/ModSecurity/issues/3591"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-138"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-64858.json b/data/2026/CVE-2026-64858.json
new file mode 100644
index 0000000000..cf02f53e41
--- /dev/null
+++ b/data/2026/CVE-2026-64858.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"vulnerability-operator","vendor":"ckotzbauer","versions":[{"status":"affected","version":"< 0.28.16"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"vulnerability-operator scans SBOMs and Images for vulnerabilities. Prior to version 0.28.16, an unauthenticated information-disclosure vulnerability exposes all vulnerability scan reports served by the operator. The /report/ HTTP endpoint mounts a raw http.FileServer over the reports directory (default /reports) with no authentication, authorization, or middleware. Any client that can reach the operator's HTTP port (default 8080) can list and download every JSON vulnerability report, disclosing CVE IDs, affected package names/versions, and container image identifiers for every workload scanned in the cluster. This issue has been patched in version 0.28.16."}],"id":"CVE-2026-64858","lastModified":"2026-11-11T18:19:47.770","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-11T18:19:47.770","references":[{"source":"security-advisories@github.com","url":"https://github.com/ckotzbauer/vulnerability-operator/commit/b083ab0146e7fb301be6b5a4bc917b5e5fad6eae"},{"source":"security-advisories@github.com","url":"https://github.com/ckotzbauer/vulnerability-operator/releases/tag/0.28.16"},{"source":"security-advisories@github.com","url":"https://github.com/ckotzbauer/vulnerability-operator/security/advisories/GHSA-6v6c-4cxg-cc93"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"},{"lang":"en","value":"CWE-548"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-65820.json b/data/2026/CVE-2026-65820.json
new file mode 100644
index 0000000000..6416c316db
--- /dev/null
+++ b/data/2026/CVE-2026-65820.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"aeon","vendor":"aeon-toolkit","versions":[{"status":"affected","version":"< 1.5.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"aeon is a scikit-learn compatible Python library for learning from time series. Prior to version 1.5.0, a GitHub Actions workflow used pull_request_target for pre-commit checks on pull requests from forks. In this configuration, fork-controlled code could be checked out and executed in a privileged context. The vulnerable workflow also generated/used elevated credentials and could automatically commit or push fixes back to pull request branches. This created a potential token exposure and repository write path if an attacker submitted a malicious fork pull request designed to execute during the privileged workflow run. This issue has been patched in version 1.5.0."}],"id":"CVE-2026-65820","lastModified":"2026-11-11T18:19:47.940","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-11T18:19:47.940","references":[{"source":"security-advisories@github.com","url":"https://github.com/aeon-toolkit/aeon/commit/99261e1355c89a316bf0824bb03f855c6aadae8f"},{"source":"security-advisories@github.com","url":"https://github.com/aeon-toolkit/aeon/pull/3394"},{"source":"security-advisories@github.com","url":"https://github.com/aeon-toolkit/aeon/security/advisories/GHSA-mhg2-mc45-wrjr"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-68485.json b/data/2026/CVE-2026-68485.json
new file mode 100644
index 0000000000..e04c99dc48
--- /dev/null
+++ b/data/2026/CVE-2026-68485.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to view another agency's website listing by changing the agencyid request parameter. Disclosed information includes website names, identifiers and timestamps. Detailed website pages continue to enforce ownership checks. The issue is fixed in Revive Adserver 6.0.9 by obtaining the agency identifier from the authenticated account rather than the request."}],"id":"CVE-2026-68485","lastModified":"2026-11-11T18:19:48.823","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:19:48.823","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3883840"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-68486.json b/data/2026/CVE-2026-68486.json
new file mode 100644
index 0000000000..a167e81330
--- /dev/null
+++ b/data/2026/CVE-2026-68486.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass in campaign-zone linking in Revive Adserver 6.0.8 and earlier allows an authenticated manager, or a trafficker with zone-linking permissions, to associate another agency's campaign with their own zone. Campaign ownership checks are missing from the bulk-linking and single-link operations in zone-include.php and the XML-RPC campaign-linking method. Although agency filtering prevents foreign banners from being linked, the unauthorized association can expose the foreign campaign's name, type and identifier in the linked-campaign listing. The issue is fixed in Revive Adserver 6.0.9 by validating campaign ownership in the affected operations."}],"id":"CVE-2026-68486","lastModified":"2026-11-11T18:19:48.960","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:19:48.960","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3958112"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-68862.json b/data/2026/CVE-2026-68862.json
new file mode 100644
index 0000000000..21898d930f
--- /dev/null
+++ b/data/2026/CVE-2026-68862.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Terraform Provider for Dell PowerFlex","vendor":"Dell","versions":[{"lessThan":"1.9.0 or later","status":"affected","version":"0","versionType":"semver"}]}],"source":"security_alert@emc.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on provisioned SDC hosts. Exploitation may lead to full compromise of affected SDC hosts."}],"id":"CVE-2026-68862","lastModified":"2026-11-11T18:19:49.170","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.7,"impactScore":5.9,"source":"security_alert@emc.com","type":"Secondary"}]},"published":"2026-11-11T18:19:49.170","references":[{"source":"security_alert@emc.com","url":"https://www.dell.com/support/kbdoc/en-in/000515434/dsa-2026-433-security-update-for-dell-terraform-provider-for-dell-storage-multiple-vulnerabilities"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"security_alert@emc.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-77168.json b/data/2026/CVE-2026-77168.json
new file mode 100644
index 0000000000..7a399e088a
--- /dev/null
+++ b/data/2026/CVE-2026-77168.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A cross-site request forgery vulnerability in tracker-invocation.php in Revive Adserver 6.0.8 and earlier allows an attacker to modify a tracker's name, description or advertiser assignment using an authenticated victim's permissions. A leftover state-changing handler accepts request parameters without verifying a CSRF token, although it is not used by the normal invocation-tag interface. Exploitation requires victim interaction and a request path that carries the victim's session credentials. The issue is fixed in Revive Adserver 6.0.9 by removing the unused tracker-modification handler."}],"id":"CVE-2026-77168","lastModified":"2026-11-11T18:19:49.673","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:19:49.673","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3981932"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-352"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-77873.json b/data/2026/CVE-2026-77873.json
new file mode 100644
index 0000000000..7d2e2c6712
--- /dev/null
+++ b/data/2026/CVE-2026-77873.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"System Update","vendor":"Lenovo","versions":[{"lessThanOrEqual":"5.08.03.59","status":"affected","version":"0","versionType":"custom"}]}],"source":"psirt@lenovo.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges."}],"id":"CVE-2026-77873","lastModified":"2026-11-11T17:17:19.940","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.3,"impactScore":5.9,"source":"psirt@lenovo.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":7.0,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@lenovo.com","type":"Secondary"}]},"published":"2026-11-11T17:17:19.940","references":[{"source":"psirt@lenovo.com","url":"https://support.lenovo.com/us/en/downloads/ds012808"},{"source":"psirt@lenovo.com","url":"https://support.lenovo.com/us/en/product_security/LEN-232748"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-276"}],"source":"psirt@lenovo.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-77882.json b/data/2026/CVE-2026-77882.json
new file mode 100644
index 0000000000..af9a56b4c0
--- /dev/null
+++ b/data/2026/CVE-2026-77882.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"System Update","vendor":"Lenovo","versions":[{"lessThanOrEqual":"5.08.03.59","status":"affected","version":"0","versionType":"custom"}]}],"source":"psirt@lenovo.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges."}],"id":"CVE-2026-77882","lastModified":"2026-11-11T17:17:20.130","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"psirt@lenovo.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.5,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@lenovo.com","type":"Secondary"}]},"published":"2026-11-11T17:17:20.130","references":[{"source":"psirt@lenovo.com","url":"https://support.lenovo.com/us/en/downloads/ds012808"},{"source":"psirt@lenovo.com","url":"https://support.lenovo.com/us/en/product_security/LEN-232748"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"psirt@lenovo.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-82978.json b/data/2026/CVE-2026-82978.json
new file mode 100644
index 0000000000..40adadc9e9
--- /dev/null
+++ b/data/2026/CVE-2026-82978.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Adserver","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"support@hackerone.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to create a delivery rule set belonging to another agency by changing the submitted agencyid parameter. The server trusts the submitted agency identifier when inserting the new rule set, allowing unauthorized creation of objects in another agency's account. The issue is fixed in Revive Adserver 6.0.9 by obtaining the agency identifier from the authenticated account rather than submitted form data and removing the agency identifier from the form's hidden fields."}],"id":"CVE-2026-82978","lastModified":"2026-11-11T18:19:49.960","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"support@hackerone.com","type":"Secondary"}]},"published":"2026-11-11T18:19:49.960","references":[{"source":"support@hackerone.com","url":"https://hackerone.com/reports/3929216"}],"sourceIdentifier":"support@hackerone.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"support@hackerone.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-86363.json b/data/2026/CVE-2026-86363.json
new file mode 100644
index 0000000000..3b349effb0
--- /dev/null
+++ b/data/2026/CVE-2026-86363.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Live Optics Collector","vendor":"Dell","versions":[{"lessThan":"27.3.13.330 or later","status":"affected","version":"0","versionType":"semver"}]}],"source":"security_alert@emc.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure."}],"id":"CVE-2026-86363","lastModified":"2026-11-11T18:19:50.837","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"security_alert@emc.com","type":"Secondary"}]},"published":"2026-11-11T18:19:50.837","references":[{"source":"security_alert@emc.com","url":"https://www.dell.com/support/kbdoc/en-us/000529138/dsa-2026-485-security-update-for-dell-live-optics-collector-vulnerabilities"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-329"}],"source":"security_alert@emc.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-86364.json b/data/2026/CVE-2026-86364.json
new file mode 100644
index 0000000000..3e910a23ea
--- /dev/null
+++ b/data/2026/CVE-2026-86364.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Live Optics Collector","vendor":"Dell","versions":[{"lessThan":"27.3.8.317 or later","status":"affected","version":"0","versionType":"semver"}]}],"source":"security_alert@emc.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure."}],"id":"CVE-2026-86364","lastModified":"2026-11-11T18:19:50.980","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.0,"impactScore":3.6,"source":"security_alert@emc.com","type":"Secondary"}]},"published":"2026-11-11T18:19:50.980","references":[{"source":"security_alert@emc.com","url":"https://www.dell.com/support/kbdoc/en-us/000529141/dsa-2026-484-security-update-for-dell-live-optics-collector-vulnerabilities"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-330"}],"source":"security_alert@emc.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-89061.json b/data/2026/CVE-2026-89061.json
new file mode 100644
index 0000000000..4f1c2644b5
--- /dev/null
+++ b/data/2026/CVE-2026-89061.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PC Manager","vendor":"Lenovo","versions":[{"lessThan":"5.1.210","status":"affected","version":"0","versionType":"custom"}]}],"source":"psirt@lenovo.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed exclusively in the Chinese market, that could allow a local user to escalate privileges."}],"id":"CVE-2026-89061","lastModified":"2026-11-11T17:17:23.107","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"psirt@lenovo.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.5,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@lenovo.com","type":"Secondary"}]},"published":"2026-11-11T17:17:23.107","references":[{"source":"psirt@lenovo.com","url":"https://iknow.lenovo.com.cn/detail/443044"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-276"}],"source":"psirt@lenovo.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-91149.json b/data/2026/CVE-2026-91149.json
index 17f738df04..1b5e6a65ed 100644
--- a/data/2026/CVE-2026-91149.json
+++ b/data/2026/CVE-2026-91149.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:356.4-1.el10_2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:356.4-1.el9_8","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:366.1-1.el9_9","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:356.4-1.el9_8","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:366.1-1.el9_9","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_devspaces:3"],"defaultStatus":"unaffected","packageName":"devspaces/udi-base-rhel10","product":"Red Hat OpenShift Dev Spaces","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_devspaces:3"],"defaultStatus":"unaffected","packageName":"devspaces/udi-base-rhel9","product":"Red Hat OpenShift Dev Spaces","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_devspaces:3"],"defaultStatus":"unaffected","packageName":"devspaces/udi-rhel9","product":"Red Hat OpenShift Dev Spaces","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the `cockpit-tls` service. This forces the service to create an unbounded number of detached threads, consuming system resources such as memory and file descriptors. The primary consequence is a denial of service (DoS), leading to degradation or complete unavailability of the Cockpit service for legitimate users."}],"id":"CVE-2026-91149","lastModified":"2026-11-11T13:17:33.620","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-91149","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-09-18T16:48:28.909025Z","version":"2.0.3"}}]},"published":"2026-09-18T17:17:05.563","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:94533"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:96250"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:98463"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-91149"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2479422"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"secalert@redhat.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:356.4-1.el10_2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:366.1-1.el10_3","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:356.4-1.el9_8","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:366.1-1.el9_9","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:356.4-1.el9_8","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:366.1-1.el9_9","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"cockpit","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_devspaces:3"],"defaultStatus":"unaffected","packageName":"devspaces/udi-base-rhel10","product":"Red Hat OpenShift Dev Spaces","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_devspaces:3"],"defaultStatus":"unaffected","packageName":"devspaces/udi-base-rhel9","product":"Red Hat OpenShift Dev Spaces","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_devspaces:3"],"defaultStatus":"unaffected","packageName":"devspaces/udi-rhel9","product":"Red Hat OpenShift Dev Spaces","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the `cockpit-tls` service. This forces the service to create an unbounded number of detached threads, consuming system resources such as memory and file descriptors. The primary consequence is a denial of service (DoS), leading to degradation or complete unavailability of the Cockpit service for legitimate users."}],"id":"CVE-2026-91149","lastModified":"2026-11-11T18:19:52.907","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-91149","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-09-18T16:48:28.909025Z","version":"2.0.3"}}]},"published":"2026-09-18T17:17:05.563","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:94533"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:96250"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:98463"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:98567"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-91149"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2479422"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"secalert@redhat.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-91870.json b/data/2026/CVE-2026-91870.json
new file mode 100644
index 0000000000..6cce08bcff
--- /dev/null
+++ b/data/2026/CVE-2026-91870.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Ansible Storage for PowerFlex","vendor":"Dell","versions":[{"lessThan":"3.2.0 or later","status":"affected","version":"0","versionType":"semver"}]}],"source":"security_alert@emc.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability in the API client component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access."}],"id":"CVE-2026-91870","lastModified":"2026-11-11T18:19:53.087","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"security_alert@emc.com","type":"Secondary"}]},"published":"2026-11-11T18:19:53.087","references":[{"source":"security_alert@emc.com","url":"https://www.dell.com/support/kbdoc/en-au/000515361/dsa-2026-431-security-update-for-dell-ansible-storage-multiple-vulnerabilities"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-295"}],"source":"security_alert@emc.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-91871.json b/data/2026/CVE-2026-91871.json
new file mode 100644
index 0000000000..e08b09a68e
--- /dev/null
+++ b/data/2026/CVE-2026-91871.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Ansible Storage for PowerStore","vendor":"Dell","versions":[{"lessThan":"3.9.0 or later","status":"affected","version":"0","versionType":"semver"}]}],"source":"security_alert@emc.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an Improper Certificate Validation vulnerability in the API client component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access."}],"id":"CVE-2026-91871","lastModified":"2026-11-11T18:19:53.223","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"security_alert@emc.com","type":"Secondary"}]},"published":"2026-11-11T18:19:53.223","references":[{"source":"security_alert@emc.com","url":"https://www.dell.com/support/kbdoc/en-au/000515361/dsa-2026-431-security-update-for-dell-ansible-storage-multiple-vulnerabilities"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-295"}],"source":"security_alert@emc.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-91872.json b/data/2026/CVE-2026-91872.json
new file mode 100644
index 0000000000..54473f6ba7
--- /dev/null
+++ b/data/2026/CVE-2026-91872.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Ansible Storage for PowerStore","vendor":"Dell","versions":[{"lessThan":"3.9.0 or later","status":"affected","version":"0","versionType":"semver"}]}],"source":"security_alert@emc.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log File vulnerability in the configuration module. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure."}],"id":"CVE-2026-91872","lastModified":"2026-11-11T18:19:53.347","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"security_alert@emc.com","type":"Secondary"}]},"published":"2026-11-11T18:19:53.347","references":[{"source":"security_alert@emc.com","url":"https://www.dell.com/support/kbdoc/en-au/000515361/dsa-2026-431-security-update-for-dell-ansible-storage-multiple-vulnerabilities"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-532"}],"source":"security_alert@emc.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-91879.json b/data/2026/CVE-2026-91879.json
new file mode 100644
index 0000000000..bf5d78f366
--- /dev/null
+++ b/data/2026/CVE-2026-91879.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Terraform Provider for ObjectScale","vendor":"Dell","versions":[{"lessThan":"1.1.1 or later","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Terraform Provider for PowerStore","vendor":"Dell","versions":[{"lessThan":"1.3.1 or later","status":"affected","version":"0","versionType":"semver"}]}],"source":"security_alert@emc.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 through 1.3.0 (PowerStore) contains an insertion of sensitive information into Log File vulnerability in the client initialization component.  A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access."}],"id":"CVE-2026-91879","lastModified":"2026-11-11T18:19:53.483","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security_alert@emc.com","type":"Secondary"}]},"published":"2026-11-11T18:19:53.483","references":[{"source":"security_alert@emc.com","url":"https://www.dell.com/support/kbdoc/en-in/000515434/dsa-2026-433-security-update-for-dell-terraform-provider-for-dell-storage-multiple-vulnerabilities"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-532"}],"source":"security_alert@emc.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-91890.json b/data/2026/CVE-2026-91890.json
new file mode 100644
index 0000000000..c85e124955
--- /dev/null
+++ b/data/2026/CVE-2026-91890.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Ansible Storage for Unity","vendor":"Dell","versions":[{"lessThan":"1.2.13 or later","status":"affected","version":"0","versionType":"semver"}]}],"source":"security_alert@emc.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell Ansible Storage for Unity , versions prior to 1.2.13 contains an Improper Certificate Validation vulnerability in the UnityRESTConnector component. An unauthenticated attacker with remote access could potentially exploit this vulnerability,leading to information exposure and unauthorized access."}],"id":"CVE-2026-91890","lastModified":"2026-11-11T18:19:53.627","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.8,"source":"security_alert@emc.com","type":"Secondary"}]},"published":"2026-11-11T18:19:53.627","references":[{"source":"security_alert@emc.com","url":"https://www.dell.com/support/kbdoc/en-au/000515361/dsa-2026-431-security-update-for-dell-ansible-storage-multiple-vulnerabilities"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-295"}],"source":"security_alert@emc.com","type":"Primary"}]}
diff --git a/state/sync.json b/state/sync.json
index 51be6eefea..7c0cba57ec 100644
--- a/state/sync.json
+++ b/state/sync.json
@@ -1 +1 @@
-{"initial_complete":true,"last_run_counts":{"seen":5949,"skipped":0,"unchanged":5823,"written":126},"last_run_mode":"incremental","last_successful_end":"2026-11-11T16:42:31+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-11T16:47:42.931673+00:00"}
+{"initial_complete":true,"last_run_counts":{"seen":5799,"skipped":0,"unchanged":5736,"written":63},"last_run_mode":"incremental","last_successful_end":"2026-11-11T18:42:41+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-11T18:47:54.349536+00:00"}