diff --git a/data/2024/CVE-2024-21540.json b/data/2024/CVE-2024-21540.json
index 0e34055df2..d20ad8d99f 100644
--- a/data/2024/CVE-2024-21540.json
+++ b/data/2024/CVE-2024-21540.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This issue is not a vulnerability because no real attack scenario can happen."}],"id":"CVE-2024-21540","lastModified":"2024-11-17T09:15:11.853","metrics":{},"published":"2024-11-13T05:15:12.997","references":[],"sourceIdentifier":"report@snyk.io","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This issue is not a vulnerability because no real attack scenario can happen."}],"id":"CVE-2024-21540","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-11-13T05:15:12.997","references":[],"sourceIdentifier":"report@snyk.io","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-31622.json b/data/2024/CVE-2024-31622.json
index 9f26e93d21..77e405ed82 100644
--- a/data/2024/CVE-2024-31622.json
+++ b/data/2024/CVE-2024-31622.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31622","lastModified":"2024-06-05T17:15:12.400","metrics":{},"published":"2024-06-05T17:15:12.400","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31622","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-05T17:15:12.400","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-31624.json b/data/2024/CVE-2024-31624.json
index ab1a5da75c..13ac719556 100644
--- a/data/2024/CVE-2024-31624.json
+++ b/data/2024/CVE-2024-31624.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31624","lastModified":"2024-06-05T17:15:12.587","metrics":{},"published":"2024-06-05T17:15:12.587","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31624","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-05T17:15:12.587","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-31625.json b/data/2024/CVE-2024-31625.json
index a162e777e4..e69140c264 100644
--- a/data/2024/CVE-2024-31625.json
+++ b/data/2024/CVE-2024-31625.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31625","lastModified":"2024-06-05T17:15:12.663","metrics":{},"published":"2024-06-05T17:15:12.663","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31625","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-05T17:15:12.663","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-31626.json b/data/2024/CVE-2024-31626.json
index cab839fde7..75a84493d8 100644
--- a/data/2024/CVE-2024-31626.json
+++ b/data/2024/CVE-2024-31626.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31626","lastModified":"2024-06-05T17:15:12.740","metrics":{},"published":"2024-06-05T17:15:12.740","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31626","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-05T17:15:12.740","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-31627.json b/data/2024/CVE-2024-31627.json
index 6f25b7d6bc..065513b4aa 100644
--- a/data/2024/CVE-2024-31627.json
+++ b/data/2024/CVE-2024-31627.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31627","lastModified":"2024-06-05T17:15:12.817","metrics":{},"published":"2024-06-05T17:15:12.817","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31627","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-05T17:15:12.817","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-31628.json b/data/2024/CVE-2024-31628.json
index 196afaf4da..681fcc857b 100644
--- a/data/2024/CVE-2024-31628.json
+++ b/data/2024/CVE-2024-31628.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31628","lastModified":"2024-06-05T17:15:12.890","metrics":{},"published":"2024-06-05T17:15:12.890","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31628","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-05T17:15:12.890","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-31629.json b/data/2024/CVE-2024-31629.json
index 419e3798ae..efcff49199 100644
--- a/data/2024/CVE-2024-31629.json
+++ b/data/2024/CVE-2024-31629.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31629","lastModified":"2024-06-05T17:15:12.960","metrics":{},"published":"2024-06-05T17:15:12.960","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31629","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-05T17:15:12.960","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-31630.json b/data/2024/CVE-2024-31630.json
index 6fe9aad9f7..ab2a92be2a 100644
--- a/data/2024/CVE-2024-31630.json
+++ b/data/2024/CVE-2024-31630.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31630","lastModified":"2024-06-05T17:15:13.040","metrics":{},"published":"2024-06-05T17:15:13.040","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31630","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-05T17:15:13.040","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-31631.json b/data/2024/CVE-2024-31631.json
index 942e262a2a..2c54bcd5bb 100644
--- a/data/2024/CVE-2024-31631.json
+++ b/data/2024/CVE-2024-31631.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31631","lastModified":"2024-06-05T17:15:13.130","metrics":{},"published":"2024-06-05T17:15:13.130","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability."}],"id":"CVE-2024-31631","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-05T17:15:13.130","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-38352.json b/data/2024/CVE-2024-38352.json
index bdf9c0671c..32db6780c0 100644
--- a/data/2024/CVE-2024-38352.json
+++ b/data/2024/CVE-2024-38352.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: CVE was assigned in error."}],"id":"CVE-2024-38352","lastModified":"2024-06-19T18:15:11.507","metrics":{},"published":"2024-06-19T18:15:11.507","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: CVE was assigned in error."}],"id":"CVE-2024-38352","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-19T18:15:11.507","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-38515.json b/data/2024/CVE-2024-38515.json
index adec57892f..7542374337 100644
--- a/data/2024/CVE-2024-38515.json
+++ b/data/2024/CVE-2024-38515.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE is a duplicate of CVE-2024-38374."}],"id":"CVE-2024-38515","lastModified":"2024-06-27T13:16:00.717","metrics":{},"published":"2024-06-27T13:16:00.717","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE is a duplicate of CVE-2024-38374."}],"id":"CVE-2024-38515","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-27T13:16:00.717","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-40430.json b/data/2024/CVE-2024-40430.json
index 80fd480689..3e9f256e17 100644
--- a/data/2024/CVE-2024-40430.json
+++ b/data/2024/CVE-2024-40430.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."}],"id":"CVE-2024-40430","lastModified":"2024-09-13T21:15:10.357","metrics":{},"published":"2024-07-22T07:15:02.207","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."}],"id":"CVE-2024-40430","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-07-22T07:15:02.207","references":[],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-40639.json b/data/2024/CVE-2024-40639.json
index 852e6729ef..baccd148fb 100644
--- a/data/2024/CVE-2024-40639.json
+++ b/data/2024/CVE-2024-40639.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE is a duplicate of another CVE."}],"id":"CVE-2024-40639","lastModified":"2024-07-17T20:15:06.603","metrics":{},"published":"2024-07-17T18:15:04.563","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE is a duplicate of another CVE."}],"id":"CVE-2024-40639","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-07-17T18:15:04.563","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-41661.json b/data/2024/CVE-2024-41661.json
index ad4c5a60fb..d114fd1743 100644
--- a/data/2024/CVE-2024-41661.json
+++ b/data/2024/CVE-2024-41661.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-50094. Reason: This candidate is a duplicate of CVE-2023-50094. Notes: All CVE users should reference CVE-2023-50094 instead of this candidate."}],"id":"CVE-2024-41661","lastModified":"2024-08-29T23:15:10.743","metrics":{},"published":"2024-07-23T18:15:06.577","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-50094. Reason: This candidate is a duplicate of CVE-2023-50094. Notes: All CVE users should reference CVE-2023-50094 instead of this candidate."}],"id":"CVE-2024-41661","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-07-23T18:15:06.577","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-41807.json b/data/2024/CVE-2024-41807.json
index 88b8ab41ed..5561ac6918 100644
--- a/data/2024/CVE-2024-41807.json
+++ b/data/2024/CVE-2024-41807.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2023-4759. Reason: This record is a reservation duplicate of CVE-2023-4759. Notes: All CVE users should reference CVE-2023-4759 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."}],"id":"CVE-2024-41807","lastModified":"2024-07-26T16:15:03.593","metrics":{},"published":"2024-07-26T16:15:03.593","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2023-4759. Reason: This record is a reservation duplicate of CVE-2023-4759. Notes: All CVE users should reference CVE-2023-4759 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."}],"id":"CVE-2024-41807","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-07-26T16:15:03.593","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-45804.json b/data/2024/CVE-2024-45804.json
index dd02ec2b1e..d4d3a59580 100644
--- a/data/2024/CVE-2024-45804.json
+++ b/data/2024/CVE-2024-45804.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE is a duplicate of another CVE."}],"id":"CVE-2024-45804","lastModified":"2024-09-17T18:15:05.110","metrics":{},"published":"2024-09-17T18:15:05.110","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE is a duplicate of another CVE."}],"id":"CVE-2024-45804","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-09-17T18:15:05.110","references":[],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-5972.json b/data/2024/CVE-2024-5972.json
index e4a1b54b0d..5f32628620 100644
--- a/data/2024/CVE-2024-5972.json
+++ b/data/2024/CVE-2024-5972.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: CVE ID issued in error. This is not a valid vulnerability."}],"id":"CVE-2024-5972","lastModified":"2024-06-28T19:15:07.500","metrics":{},"published":"2024-06-28T19:15:07.500","references":[],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: CVE ID issued in error. This is not a valid vulnerability."}],"id":"CVE-2024-5972","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-06-28T19:15:07.500","references":[],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-6642.json b/data/2024/CVE-2024-6642.json
index 119e359bb5..c48da0ebfa 100644
--- a/data/2024/CVE-2024-6642.json
+++ b/data/2024/CVE-2024-6642.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."}],"id":"CVE-2024-6642","lastModified":"2024-07-10T13:15:11.140","metrics":{},"published":"2024-07-10T13:15:11.140","references":[],"sourceIdentifier":"ecc0f906-8666-484c-bcf8-c3b7520a72f0","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none."}],"id":"CVE-2024-6642","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-07-10T13:15:11.140","references":[],"sourceIdentifier":"ecc0f906-8666-484c-bcf8-c3b7520a72f0","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-7121.json b/data/2024/CVE-2024-7121.json
index 144dc7e47f..d50291da88 100644
--- a/data/2024/CVE-2024-7121.json
+++ b/data/2024/CVE-2024-7121.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."}],"id":"CVE-2024-7121","lastModified":"2024-08-08T17:15:19.820","metrics":{},"published":"2024-08-08T17:15:19.820","references":[],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."}],"id":"CVE-2024-7121","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-08-08T17:15:19.820","references":[],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-7123.json b/data/2024/CVE-2024-7123.json
index a644e58c93..88339d395f 100644
--- a/data/2024/CVE-2024-7123.json
+++ b/data/2024/CVE-2024-7123.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."}],"id":"CVE-2024-7123","lastModified":"2024-08-08T17:15:19.970","metrics":{},"published":"2024-08-08T17:15:19.970","references":[],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."}],"id":"CVE-2024-7123","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-08-08T17:15:19.970","references":[],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-7989.json b/data/2024/CVE-2024-7989.json
index ada4e32de2..ecd666bc77 100644
--- a/data/2024/CVE-2024-7989.json
+++ b/data/2024/CVE-2024-7989.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that the issue does not pose a security risk as it falls within the expected functionality and security controls of the application. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."}],"id":"CVE-2024-7989","lastModified":"2024-08-26T21:15:29.777","metrics":{},"published":"2024-08-26T21:15:29.777","references":[],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that the issue does not pose a security risk as it falls within the expected functionality and security controls of the application. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage."}],"id":"CVE-2024-7989","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-08-26T21:15:29.777","references":[],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Rejected"}
diff --git a/data/2024/CVE-2024-9998.json b/data/2024/CVE-2024-9998.json
index 0292eafcb6..2732fb22ba 100644
--- a/data/2024/CVE-2024-9998.json
+++ b/data/2024/CVE-2024-9998.json
@@ -1 +1 @@
-{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: The vulnerability has no impact, so it has been deprecated."}],"id":"CVE-2024-9998","lastModified":"2024-11-12T11:15:03.840","metrics":{},"published":"2024-11-12T11:15:03.840","references":[],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Rejected"}
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: The vulnerability has no impact, so it has been deprecated."}],"id":"CVE-2024-9998","lastModified":"2026-11-13T20:10:00.183","metrics":{},"published":"2024-11-12T11:15:03.840","references":[],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Rejected"}
diff --git a/data/2025/CVE-2025-0008.json b/data/2025/CVE-2025-0008.json
index 852ed04fb9..e8ce251539 100644
--- a/data/2025/CVE-2025-0008.json
+++ b/data/2025/CVE-2025-0008.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 7003 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"MilanPI 1.0.0.G"}]},{"defaultStatus":"affected","product":"AMD EPYC™ 7002 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"RomePI-SP3_1.0.0.Q"}]},{"defaultStatus":"affected","product":"AMD EPYC™ 7001 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"NaplesPI-SP3_1.0.0.T"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 3000 Series Desktop Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM4v2 1.2.0.10"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"ChagallWSPI-sWRX8 1.0.0.D"},{"status":"unaffected","version":"CastlePeakWSPI-sWRX8 1.0.0.I"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"ChagallWSPI-sWRX8 1.0.0.D"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 3000 Series Desktop Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM4 1.0.0.10"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 7003 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbMilanPI-SP3 1.0.0.B"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 7002 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedRomePI-SP3 1.0.0.G"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 3000 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"SnowyOwl_SP4_SP4r2.1.1.0.I"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauthorized debug access."}],"id":"CVE-2025-0008","lastModified":"2026-11-13T00:20:03.843","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.4,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0008","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:49:03.958779Z","version":"2.0.3"}}]},"published":"2026-11-10T23:17:18.703","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3049.html"},{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4018.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-347"}],"source":"psirt@amd.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 7003 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"MilanPI 1.0.0.G"}]},{"defaultStatus":"affected","product":"AMD EPYC™ 7002 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"RomePI-SP3_1.0.0.Q"}]},{"defaultStatus":"affected","product":"AMD EPYC™ 7001 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"NaplesPI-SP3_1.0.0.T"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 3000 Series Desktop Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM4v2 1.2.0.10"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"ChagallWSPI-sWRX8 1.0.0.D"},{"status":"unaffected","version":"CastlePeakWSPI-sWRX8 1.0.0.I"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"ChagallWSPI-sWRX8 1.0.0.D"}]},{"defaultStatus":"affected","product":"AMD Ryzen™ 3000 Series Desktop Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"ComboAM4 1.0.0.10"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 7003 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbMilanPI-SP3 1.0.0.B"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 7002 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedRomePI-SP3 1.0.0.G"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 3000 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"SnowyOwl_SP4_SP4r2.1.1.0.I"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauthorized debug access."},{"lang":"es","value":"La verificación insuficiente de la autenticidad de los datos puede permitir a un atacante local bypassar Secure Debug Unlock (SDU), lo que podría provocar acceso no autorizado a la depuración."}],"id":"CVE-2025-0008","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.4,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0008","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:49:03.958779Z","version":"2.0.3"}}]},"published":"2026-11-10T23:17:18.703","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3049.html"},{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4018.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-347"}],"source":"psirt@amd.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-0043.json b/data/2025/CVE-2025-0043.json
index 6a310b01b9..6943b5514f 100644
--- a/data/2025/CVE-2025-0043.json
+++ b/data/2025/CVE-2025-0043.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"Vivado Software","vendor":"AMD","versions":[{"status":"unaffected","version":"2026.1"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect directory permissions within AMD Vivado™ Lab Solutions could allow a local user-privileged attacker to escalate their privileges, potentially resulting in arbitrary code execution."}],"id":"CVE-2025-0043","lastModified":"2026-11-13T02:18:48.293","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":7.0,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0043","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T00:15:36.585880Z","version":"2.0.3"}}]},"published":"2026-11-12T20:18:13.827","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8024.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-276"}],"source":"psirt@amd.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"Vivado Software","vendor":"AMD","versions":[{"status":"unaffected","version":"2026.1"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect directory permissions within AMD Vivado™ Lab Solutions could allow a local user-privileged attacker to escalate their privileges, potentially resulting in arbitrary code execution."},{"lang":"es","value":"Incorrectos permisos de directorio dentro de AMD Vivado™ Lab Solutions podrían permitir a un atacante local-privilegiado que se encuentra en el sistema de ejecutar código arbitrario potencialmente.\n\nNota: En la traducción original, se indicó que la vulnerabilidad podría resultar en una ejecución de código arbitrario, por lo que se mantuvieron las mismas palabras para evitar la pérdida de información.\n\nNota: Aunque la traducción se basa en el texto proporcionado, se puede sugerir que se puede realizar una mejor traducción, como “ ejecución de código arbitraria”, en lugar de ”ejecución de código arbitrario"}],"id":"CVE-2025-0043","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":7.0,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0043","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T00:15:36.585880Z","version":"2.0.3"}}]},"published":"2026-11-12T20:18:13.827","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8024.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-276"}],"source":"psirt@amd.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-10935.json b/data/2025/CVE-2025-10935.json
index caeb95dfe9..6331b1804e 100644
--- a/data/2025/CVE-2025-10935.json
+++ b/data/2025/CVE-2025-10935.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"libilbm","vendor":"libilbm","versions":[{"status":"affected","version":"3.0.4"}]}],"source":"zdi-disclosures@trendmicro.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libilbm. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ILBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27792."}],"id":"CVE-2025-10935","lastModified":"2026-11-12T21:09:09.470","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"zdi-disclosures@trendmicro.com","type":"Secondary"}]},"published":"2026-11-12T03:17:08.107","references":[{"source":"zdi-disclosures@trendmicro.com","url":"https://www.zerodayinitiative.com/advisories/ZDI-26-887/"}],"sourceIdentifier":"zdi-disclosures@trendmicro.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"zdi-disclosures@trendmicro.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"libilbm","vendor":"libilbm","versions":[{"status":"affected","version":"3.0.4"}]}],"source":"zdi-disclosures@trendmicro.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libilbm. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ILBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27792."},{"lang":"es","value":"La vulnerabilidad de libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution. Esta vulnerabilidad permite a los atacantes remotos ejecutar código arbitrario en instalaciones afectadas de libilbm. La interacción del usuario es necesaria para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.\n\nEl fallo específico se encuentra en el procesamiento de archivos ILBM. El problema se debe a la falta de validación adecuada de la longitud de los datos suministrados por el usuario antes de copiarlos a un búfer basado en la pila. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. Fue ZDI-CAN-27792."}],"id":"CVE-2025-10935","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"zdi-disclosures@trendmicro.com","type":"Secondary"}]},"published":"2026-11-12T03:17:08.107","references":[{"source":"zdi-disclosures@trendmicro.com","url":"https://www.zerodayinitiative.com/advisories/ZDI-26-887/"}],"sourceIdentifier":"zdi-disclosures@trendmicro.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"zdi-disclosures@trendmicro.com","type":"Primary"}]}
diff --git a/data/2025/CVE-2025-15711.json b/data/2025/CVE-2025-15711.json
index 2b6920a639..039a8fdb82 100644
--- a/data/2025/CVE-2025-15711.json
+++ b/data/2025/CVE-2025-15711.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Live Composer","vendor":"Unknown","versions":[{"lessThan":"2.1.24","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Live Composer  WordPress plugin before 2.1.24 does not sanitise and escape some of its module settings before outputting them in an href attribute, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups)."}],"id":"CVE-2025-15711","lastModified":"2026-11-12T18:49:18.840","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-15711","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T11:28:36.250909Z","version":"2.0.3"}}]},"published":"2026-11-11T06:17:08.427","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/3c296d09-122f-420e-9ab1-81ffdfff88c2/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Live Composer","vendor":"Unknown","versions":[{"lessThan":"2.1.24","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Live Composer  WordPress plugin before 2.1.24 does not sanitise and escape some of its module settings before outputting them in an href attribute, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups)."},{"lang":"es","value":"Aplíquese el plugin de WordPress Live Composer versiones anteriores a 2.1.24 no sanitiza ni escape algunas de sus configuraciones de módulo antes de salir en un atributo href, lo que podría permitir a usuarios con privilegios altos, como administradores, realizar ataques de Cross-Site Scripting almacenados incluso cuando la capacidad unfiltrada_html está desactivada (por ejemplo, en configuraciones de multisitio)."}],"id":"CVE-2025-15711","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-15711","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T11:28:36.250909Z","version":"2.0.3"}}]},"published":"2026-11-11T06:17:08.427","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/3c296d09-122f-420e-9ab1-81ffdfff88c2/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-15712.json b/data/2025/CVE-2025-15712.json
index 00f1341d4c..d9c397902d 100644
--- a/data/2025/CVE-2025-15712.json
+++ b/data/2025/CVE-2025-15712.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Live Composer","vendor":"Unknown","versions":[{"lessThan":"2.1.24","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Live Composer  WordPress plugin before 2.1.24 does not sanitise and escape some of its staff member settings before outputting them in pages, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups)."}],"id":"CVE-2025-15712","lastModified":"2026-11-12T18:49:18.840","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-15712","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T11:28:23.457888Z","version":"2.0.3"}}]},"published":"2026-11-11T06:17:10.033","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/00d2c75d-7e8f-4f6c-8b72-c66b1bb6cc59/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Live Composer","vendor":"Unknown","versions":[{"lessThan":"2.1.24","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Live Composer  WordPress plugin before 2.1.24 does not sanitise and escape some of its staff member settings before outputting them in pages, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups)."},{"lang":"es","value":"El plugin de WordPress Live Composer antes de la versión 2.1.24 no sanitiza ni escape algunos de sus ajustes de personal para su salida en páginas, lo que podría permitir a usuarios de alto privilegio como administradores realizar ataques de Cross-Site Scripting almacenados incluso cuando la capacidad de unfiltered_html está deshabilitada (por ejemplo, en entornos de multisite).\n\nNota: He mantenido el contexto técnico y la precisión del original."}],"id":"CVE-2025-15712","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-15712","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T11:28:23.457888Z","version":"2.0.3"}}]},"published":"2026-11-11T06:17:10.033","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/00d2c75d-7e8f-4f6c-8b72-c66b1bb6cc59/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-15713.json b/data/2025/CVE-2025-15713.json
index 3de42a9ff2..d918665f97 100644
--- a/data/2025/CVE-2025-15713.json
+++ b/data/2025/CVE-2025-15713.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Live Composer","vendor":"Unknown","versions":[{"lessThan":"2.1.24","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Live Composer  WordPress plugin before 2.1.24 does not sanitise and escape some of its page-builder module settings before outputting them, allowing users with access to the builder (Administrator by default) to inject arbitrary JavaScript that executes when the affected page is viewed by any visitor; this has impact even on administrators where the unfiltered_html capability is disallowed, e.g. in multisite setups."}],"id":"CVE-2025-15713","lastModified":"2026-11-12T18:49:18.840","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-15713","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T11:28:04.856633Z","version":"2.0.3"}}]},"published":"2026-11-11T06:17:10.167","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/eb5d2c5b-0035-4c84-876a-b4268e27e3cc/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Live Composer","vendor":"Unknown","versions":[{"lessThan":"2.1.24","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Live Composer  WordPress plugin before 2.1.24 does not sanitise and escape some of its page-builder module settings before outputting them, allowing users with access to the builder (Administrator by default) to inject arbitrary JavaScript that executes when the affected page is viewed by any visitor; this has impact even on administrators where the unfiltered_html capability is disallowed, e.g. in multisite setups."},{"lang":"es","value":"La extensión Live Composer  de WordPress, antes de la versión 2.1.24, no sanitiza ni evita la escapada de algunos de sus configuraciones del módulo de edición de página antes de mostrarlas, lo que permite a los usuarios con acceso al editor (de forma predeterminada, el Administrador) inyectar código JavaScript arbitrario que se ejecuta cuando la página afectada se ve por cualquier visitante; este impacto aún afecta incluso a los administradores donde la capacidad de unificación de HTML no está deshabilitada, por ejemplo, en configuraciones de multisite.\n\nNota: He utilizado la palabra “extensión” para traducir “plugin”, como es común en español. Si prefieres utilizar “modo de WordPress”, puedo hacer la traducción."}],"id":"CVE-2025-15713","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-15713","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T11:28:04.856633Z","version":"2.0.3"}}]},"published":"2026-11-11T06:17:10.167","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/eb5d2c5b-0035-4c84-876a-b4268e27e3cc/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-15714.json b/data/2025/CVE-2025-15714.json
index 8e6b1e876f..206a0f5e43 100644
--- a/data/2025/CVE-2025-15714.json
+++ b/data/2025/CVE-2025-15714.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Live Composer","vendor":"Unknown","versions":[{"lessThan":"2.1.24","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Live Composer  WordPress plugin before 2.1.24 does not sanitise and escape some of its Button module settings before outputting them on the front end, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups)."}],"id":"CVE-2025-15714","lastModified":"2026-11-12T18:49:18.840","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-15714","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T11:27:53.148629Z","version":"2.0.3"}}]},"published":"2026-11-11T06:17:10.293","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/03a1c844-9a9f-4702-ba6c-3ada3e779014/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Live Composer","vendor":"Unknown","versions":[{"lessThan":"2.1.24","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Live Composer  WordPress plugin before 2.1.24 does not sanitise and escape some of its Button module settings before outputting them on the front end, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (e.g. in multisite setups)."},{"lang":"es","value":"La versión anterior de Live Composer  WordPress (antes de 2.1.24) no sanitiza ni evita la escape de algunos ajustes de su módulo Botón antes de su salida al frente, lo cual podría permitir a los usuarios con privilegios altos, como los administradores, realizar ataques de Cross-Site Scripting almacenados incluso cuando se deshabilita la capacidad de mostrar HTML no filtrado (por ejemplo, en configuraciones de multisitio)."}],"id":"CVE-2025-15714","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-15714","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T11:27:53.148629Z","version":"2.0.3"}}]},"published":"2026-11-11T06:17:10.293","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/03a1c844-9a9f-4702-ba6c-3ada3e779014/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-48038.json b/data/2025/CVE-2025-48038.json
index 49330b16d8..3516389cfb 100644
--- a/data/2025/CVE-2025-48038.json
+++ b/data/2025/CVE-2025-48038.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"otp","packageURL":"pkg:software-id/erlang.org/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"vendor":"Erlang","versions":[{"changes":[{"at":"26.2.5.15","status":"unaffected"},{"at":"27.3.4.3","status":"unaffected"},{"at":"28.0.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"17.0","versionType":"otp"}]},{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"ssh","packageURL":"pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git","product":"OTP","programFiles":["src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"5.1.4.12","status":"unaffected"},{"at":"5.2.11.3","status":"unaffected"},{"at":"5.3.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"3.0.1","versionType":"otp"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"erlang/otp","packageURL":"pkg:github/erlang/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"f09e0201ff701993dc24a08f15e524daf72db42f","status":"unaffected"},{"at":"4e3bf86777ab3db7220c11d8ddabf15970ddd10a","status":"unaffected"}],"lessThan":"*","status":"affected","version":"07b8f441ca711f9812fad9e9115bab3c3aa92f79","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."}],"id":"CVE-2025-48038","lastModified":"2026-11-11T20:16:58.097","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-48038","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-09-11T13:30:56.648005Z","version":"2.0.3"}}]},"published":"2025-09-11T09:15:33.940","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2025-48038.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/4e3bf86777ab3db7220c11d8ddabf15970ddd10a"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/f09e0201ff701993dc24a08f15e524daf72db42f"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/pull/10156"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/security/advisories/GHSA-pvj7-9652-7h9r"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2025-48038"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://www.erlang.org/doc/system/versions.html#order-of-versions"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-770"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"otp","packageURL":"pkg:software-id/erlang.org/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"vendor":"Erlang","versions":[{"changes":[{"at":"26.2.5.15","status":"unaffected"},{"at":"27.3.4.3","status":"unaffected"},{"at":"28.0.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"17.0","versionType":"otp"}]},{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"ssh","packageURL":"pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git","product":"OTP","programFiles":["src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"5.1.4.12","status":"unaffected"},{"at":"5.2.11.3","status":"unaffected"},{"at":"5.3.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"3.0.1","versionType":"otp"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"erlang/otp","packageURL":"pkg:github/erlang/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"f09e0201ff701993dc24a08f15e524daf72db42f","status":"unaffected"},{"at":"4e3bf86777ab3db7220c11d8ddabf15970ddd10a","status":"unaffected"}],"lessThan":"*","status":"affected","version":"07b8f441ca711f9812fad9e9115bab3c3aa92f79","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."},{"lang":"es","value":"Vulnerabilidad de asignación de recursos sin límites o limitación (throttling) en los módulos ssh (ssh_sftp) de Erlang OTP que permite la asignación excesiva y la exposición a fugas de recursos.\n\nEsta vulnerabilidad está asociada con los archivos de programa lib/ssh/src/ssh_sftpd.erl.\n\nEste problema afecta a OTP desde la versión 17.0 hasta versiones anteriores a la 26.2.5.15, así como a las versiones 27.3.4.3 y 28.0.3, lo que corresponde a ssh desde la versión 3.0.1 hasta versiones anteriores a la 5.1.4.12, así como a las versiones 5.2.11.3 y 5.3.3."}],"id":"CVE-2025-48038","lastModified":"2026-11-13T19:10:00.190","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-48038","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-09-11T13:30:56.648005Z","version":"2.0.3"}}]},"published":"2025-09-11T09:15:33.940","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2025-48038.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/4e3bf86777ab3db7220c11d8ddabf15970ddd10a"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/f09e0201ff701993dc24a08f15e524daf72db42f"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/pull/10156"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/security/advisories/GHSA-pvj7-9652-7h9r"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2025-48038"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://www.erlang.org/doc/system/versions.html#order-of-versions"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-770"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-48039.json b/data/2025/CVE-2025-48039.json
index b13c3f3a45..8e813f2c56 100644
--- a/data/2025/CVE-2025-48039.json
+++ b/data/2025/CVE-2025-48039.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"otp","packageURL":"pkg:software-id/erlang.org/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"vendor":"Erlang","versions":[{"changes":[{"at":"26.2.5.15","status":"unaffected"},{"at":"27.3.4.3","status":"unaffected"},{"at":"28.0.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"17.0","versionType":"otp"}]},{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"ssh","packageURL":"pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git","product":"OTP","programFiles":["src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"5.1.4.12","status":"unaffected"},{"at":"5.2.11.3","status":"unaffected"},{"at":"5.3.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"3.0.1","versionType":"otp"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"erlang/otp","packageURL":"pkg:github/erlang/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"043ee3c943e2977c1acdd740ad13992fd60b6bf0","status":"unaffected"},{"at":"c242e6458967e9514bea351814151695807a54ac","status":"unaffected"}],"lessThan":"*","status":"affected","version":"07b8f441ca711f9812fad9e9115bab3c3aa92f79","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."}],"id":"CVE-2025-48039","lastModified":"2026-11-11T20:16:58.373","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-48039","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-09-11T13:30:44.440721Z","version":"2.0.3"}}]},"published":"2025-09-11T09:15:34.180","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2025-48039.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/043ee3c943e2977c1acdd740ad13992fd60b6bf0"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/c242e6458967e9514bea351814151695807a54ac"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/pull/10155"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/security/advisories/GHSA-rr5p-6856-j7h8"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2025-48039"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://www.erlang.org/doc/system/versions.html#order-of-versions"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-770"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"otp","packageURL":"pkg:software-id/erlang.org/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"vendor":"Erlang","versions":[{"changes":[{"at":"26.2.5.15","status":"unaffected"},{"at":"27.3.4.3","status":"unaffected"},{"at":"28.0.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"17.0","versionType":"otp"}]},{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"ssh","packageURL":"pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git","product":"OTP","programFiles":["src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"5.1.4.12","status":"unaffected"},{"at":"5.2.11.3","status":"unaffected"},{"at":"5.3.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"3.0.1","versionType":"otp"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"erlang/otp","packageURL":"pkg:github/erlang/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"043ee3c943e2977c1acdd740ad13992fd60b6bf0","status":"unaffected"},{"at":"c242e6458967e9514bea351814151695807a54ac","status":"unaffected"}],"lessThan":"*","status":"affected","version":"07b8f441ca711f9812fad9e9115bab3c3aa92f79","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."},{"lang":"es","value":"Vulnerabilidad de asignación de recursos sin límites ni limitación en los módulos ssh (ssh_sftp) de Erlang OTP que permite la asignación excesiva y la exposición a fugas de recursos.\n\nEsta vulnerabilidad está asociada con los archivos de programa lib/ssh/src/ssh_sftpd.erl.\n\nEste problema afecta a OTP desde la versión OTP 17.0 hasta versiones anteriores a la OTP 26.2.5.15, así como las versiones OTP 27.3.4.3 y OTP 28.0.3, correspondiente a ssh desde la versión 3.0.1 hasta versiones anteriores a la 5.1.4.12, así como las versiones 5.2.11.3 y 5.3.3."}],"id":"CVE-2025-48039","lastModified":"2026-11-13T19:10:00.190","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-48039","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-09-11T13:30:44.440721Z","version":"2.0.3"}}]},"published":"2025-09-11T09:15:34.180","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2025-48039.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/043ee3c943e2977c1acdd740ad13992fd60b6bf0"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/c242e6458967e9514bea351814151695807a54ac"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/pull/10155"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/security/advisories/GHSA-rr5p-6856-j7h8"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2025-48039"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://www.erlang.org/doc/system/versions.html#order-of-versions"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-770"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-48040.json b/data/2025/CVE-2025-48040.json
index 979dfb8391..d3a013ac22 100644
--- a/data/2025/CVE-2025-48040.json
+++ b/data/2025/CVE-2025-48040.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftp"],"packageName":"otp","packageURL":"pkg:software-id/erlang.org/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"vendor":"Erlang","versions":[{"changes":[{"at":"26.2.5.15","status":"unaffected"},{"at":"27.3.4.3","status":"unaffected"},{"at":"28.0.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"17.0","versionType":"otp"}]},{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftp"],"packageName":"ssh","packageURL":"pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git","product":"OTP","programFiles":["src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"5.1.4.12","status":"unaffected"},{"at":"5.2.11.3","status":"unaffected"},{"at":"5.3.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"3.0.1","versionType":"otp"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftp"],"packageName":"erlang/otp","packageURL":"pkg:github/erlang/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"548f1295d86d0803da884db8685cc16d461d0d5a","status":"unaffected"},{"at":"7cd7abb7e19e16b027eaee6a54e1f6fbbe21181a","status":"unaffected"}],"lessThan":"*","status":"affected","version":"07b8f441ca711f9812fad9e9115bab3c3aa92f79","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."}],"id":"CVE-2025-48040","lastModified":"2026-11-11T20:16:58.587","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-48040","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-09-11T13:30:33.529743Z","version":"2.0.3"}}]},"published":"2025-09-11T09:15:34.400","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2025-48040.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/548f1295d86d0803da884db8685cc16d461d0d5a"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/7cd7abb7e19e16b027eaee6a54e1f6fbbe21181a"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/pull/10162"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/security/advisories/GHSA-h7rg-6rjg-4cph"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2025-48040"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://www.erlang.org/doc/system/versions.html#order-of-versions"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-770"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftp"],"packageName":"otp","packageURL":"pkg:software-id/erlang.org/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"vendor":"Erlang","versions":[{"changes":[{"at":"26.2.5.15","status":"unaffected"},{"at":"27.3.4.3","status":"unaffected"},{"at":"28.0.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"17.0","versionType":"otp"}]},{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftp"],"packageName":"ssh","packageURL":"pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git","product":"OTP","programFiles":["src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"5.1.4.12","status":"unaffected"},{"at":"5.2.11.3","status":"unaffected"},{"at":"5.3.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"3.0.1","versionType":"otp"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftp"],"packageName":"erlang/otp","packageURL":"pkg:github/erlang/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"548f1295d86d0803da884db8685cc16d461d0d5a","status":"unaffected"},{"at":"7cd7abb7e19e16b027eaee6a54e1f6fbbe21181a","status":"unaffected"}],"lessThan":"*","status":"affected","version":"07b8f441ca711f9812fad9e9115bab3c3aa92f79","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."},{"lang":"es","value":"Vulnerabilidad de consumo de recursos no controlado en Erlang OTP ssh (módulos ssh_sftp) que permite la asignación excesiva y la inundación.\n\nEsta vulnerabilidad está asociada con los archivos de programa lib/ssh/src/ssh_sftpd.erl.\n\nEste problema afecta a OTP desde la versión 17.0 y anteriores a la versión 26.2.5.15, así como a las versiones OTP 27.3.4.3 y OTP 28.0.3, lo que corresponde a ssh desde la versión 3.0.1 y anteriores a la versión 5.1.4.12, así como a las versiones 5.2.11.3 y 5.3.3."}],"id":"CVE-2025-48040","lastModified":"2026-11-13T19:10:00.190","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-48040","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-09-11T13:30:33.529743Z","version":"2.0.3"}}]},"published":"2025-09-11T09:15:34.400","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2025-48040.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/548f1295d86d0803da884db8685cc16d461d0d5a"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/7cd7abb7e19e16b027eaee6a54e1f6fbbe21181a"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/pull/10162"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/security/advisories/GHSA-h7rg-6rjg-4cph"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2025-48040"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://www.erlang.org/doc/system/versions.html#order-of-versions"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-770"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-48041.json b/data/2025/CVE-2025-48041.json
index c73f5a239c..40ee110595 100644
--- a/data/2025/CVE-2025-48041.json
+++ b/data/2025/CVE-2025-48041.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"otp","packageURL":"pkg:software-id/erlang.org/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"vendor":"Erlang","versions":[{"changes":[{"at":"26.2.5.15","status":"unaffected"},{"at":"27.3.4.3","status":"unaffected"},{"at":"28.0.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"17.0","versionType":"otp"}]},{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"ssh","packageURL":"pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git","product":"OTP","programFiles":["src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"5.1.4.12","status":"unaffected"},{"at":"5.2.11.3","status":"unaffected"},{"at":"5.3.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"3.0.1","versionType":"otp"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"erlang/otp","packageURL":"pkg:github/erlang/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"d49efa2d4fa9e6f7ee658719cd76ffe7a33c2401","status":"unaffected"},{"at":"5f9af63eec4657a37663828d206517828cb9f288","status":"unaffected"}],"lessThan":"*","status":"affected","version":"07b8f441ca711f9812fad9e9115bab3c3aa92f79","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."}],"id":"CVE-2025-48041","lastModified":"2026-11-11T20:16:58.780","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-48041","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-09-11T13:30:20.449625Z","version":"2.0.3"}}]},"published":"2025-09-11T09:15:34.603","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2025-48041.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/5f9af63eec4657a37663828d206517828cb9f288"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/d49efa2d4fa9e6f7ee658719cd76ffe7a33c2401"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/pull/10157"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/security/advisories/GHSA-79c4-cvv7-4qm3"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2025-48041"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://www.erlang.org/doc/system/versions.html#order-of-versions"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-770"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"otp","packageURL":"pkg:software-id/erlang.org/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"vendor":"Erlang","versions":[{"changes":[{"at":"26.2.5.15","status":"unaffected"},{"at":"27.3.4.3","status":"unaffected"},{"at":"28.0.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"17.0","versionType":"otp"}]},{"cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"ssh","packageURL":"pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git","product":"OTP","programFiles":["src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"5.1.4.12","status":"unaffected"},{"at":"5.2.11.3","status":"unaffected"},{"at":"5.3.3","status":"unaffected"}],"lessThan":"*","status":"affected","version":"3.0.1","versionType":"otp"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["ssh_sftpd"],"packageName":"erlang/otp","packageURL":"pkg:github/erlang/otp","product":"OTP","programFiles":["lib/ssh/src/ssh_sftpd.erl"],"repo":"https://github.com/erlang/otp","vendor":"Erlang","versions":[{"changes":[{"at":"d49efa2d4fa9e6f7ee658719cd76ffe7a33c2401","status":"unaffected"},{"at":"5f9af63eec4657a37663828d206517828cb9f288","status":"unaffected"}],"lessThan":"*","status":"affected","version":"07b8f441ca711f9812fad9e9115bab3c3aa92f79","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.\n\nThis issue affects OTP from OTP 17.0 before OTP 26.2.5.15, OTP 27.3.4.3, and OTP 28.0.3, corresponding to ssh from 3.0.1 before 5.1.4.12, 5.2.11.3, and 5.3.3."},{"lang":"es","value":"Vulnerabilidad de asignación de recursos sin límites ni limitación en Erlang OTP ssh (módulos ssh_sftp) que permite la asignación excesiva y el desbordamiento.\n\nEsta vulnerabilidad está asociada con los archivos de programa lib/ssh/src/ssh_sftpd.erl.\n\nEste problema afecta a OTP desde la versión 17.0 hasta versiones anteriores a la 26.2.5.15, la 27.3.4.3 y la 28.0.3, correspondiente a ssh desde la versión 3.0.1 hasta versiones anteriores a la 5.1.4.12, la 5.2.11.3 y la 5.3.3."}],"id":"CVE-2025-48041","lastModified":"2026-11-13T19:10:00.190","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-48041","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-09-11T13:30:20.449625Z","version":"2.0.3"}}]},"published":"2025-09-11T09:15:34.603","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2025-48041.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/07b8f441ca711f9812fad9e9115bab3c3aa92f79"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/5f9af63eec4657a37663828d206517828cb9f288"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/commit/d49efa2d4fa9e6f7ee658719cd76ffe7a33c2401"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/pull/10157"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/erlang/otp/security/advisories/GHSA-79c4-cvv7-4qm3"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2025-48041"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://www.erlang.org/doc/system/versions.html#order-of-versions"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-770"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-54501.json b/data/2025/CVE-2025-54501.json
index 5863eb4ace..6cec4ce757 100644
--- a/data/2025/CVE-2025-54501.json
+++ b/data/2025/CVE-2025-54501.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 7003 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"MilanPI-SP3_1.0.0.K"}]},{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 7003 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbMilanPI-SP3 1.0.0.E"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially resulting in a loss of SEV-SNP guest memory integrity."}],"id":"CVE-2025-54501","lastModified":"2026-11-13T02:18:48.420","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54501","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T00:17:42.748134Z","version":"2.0.3"}}]},"published":"2026-11-12T19:16:45.017","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3054.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1191"}],"source":"psirt@amd.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 7003 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"MilanPI-SP3_1.0.0.K"}]},{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 7003 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbMilanPI-SP3 1.0.0.E"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially resulting in a loss of SEV-SNP guest memory integrity."},{"lang":"es","value":"Acceso no controlado inadecuado a una interfaz de depuración interna podría permitir a un atacante altamente privilegiado superar los controles de acceso a la memoria potencialmente resultando en una pérdida de integridad de la memoria del huésped SEV-SNP.”\n\nNota: Se ha mantenido la estructura y el significado original del texto, pero se ha adaptado el lenguaje y las referencias para adaptarse al español.\n\nEn el contexto de la seguridad de la plataforma, la vulnerabilidad representa un riesgo potencial para la integridad de la memoria del huésped SEV-SNP. Por lo tanto, es esencial realizar un análisis exhaustivo de esta vulnerabilidad para identificar y corregir cualquier error de acceso.\n\nEn este contexto, se considera importante realizar un análisis de la interfaz de depuración interna para identificar cualquier posible error de acceso que pueda permitir a un atacante altamente privilegiado superar los controles de acceso a la memoria. Al realizar este análisis, se pueden tomar medidas correctivas para prevenir cualquier pérdida potencial de integridad de la memoria del huésped SEV-SNP."}],"id":"CVE-2025-54501","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54501","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T00:17:42.748134Z","version":"2.0.3"}}]},"published":"2026-11-12T19:16:45.017","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3054.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1191"}],"source":"psirt@amd.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-54503.json b/data/2025/CVE-2025-54503.json
index b30485ca9b..d8777595e2 100644
--- a/data/2025/CVE-2025-54503.json
+++ b/data/2025/CVE-2025-54503.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to cause misconfigurations in the RMP potentially resulting in loss of integrity."}],"id":"CVE-2025-54503","lastModified":"2026-11-13T00:20:04.830","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54503","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:38:10.484039Z","version":"2.0.3"}}]},"published":"2026-11-10T22:17:46.317","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1260"}],"source":"psirt@amd.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to cause misconfigurations in the RMP potentially resulting in loss of integrity."},{"lang":"es","value":"El manejo adecuado de la superposición entre rango de memoria protegida en el firmware de Virtualización Cifrada Segura (SEV) podría permitir a un atacante privilegiado causar malas configuraciones en el RMP potencialmente resultando en pérdida de integridad.\n\nNota: Al hacer el traducción, se ha intentado mantener la exactitud y la claridad del contexto técnico original."}],"id":"CVE-2025-54503","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54503","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:38:10.484039Z","version":"2.0.3"}}]},"published":"2026-11-10T22:17:46.317","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1260"}],"source":"psirt@amd.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-54504.json b/data/2025/CVE-2025-54504.json
index fe798c5d9d..f83554908d 100644
--- a/data/2025/CVE-2025-54504.json
+++ b/data/2025/CVE-2025-54504.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges attacker to write to a trusted region used by AMD Secure Encrypted Virtualization-Encrypted State (SEV-ES), potentially resulting in loss of integrity."}],"id":"CVE-2025-54504","lastModified":"2026-11-13T00:20:04.967","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54504","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:39:44.566667Z","version":"2.0.3"}}]},"published":"2026-11-10T22:17:46.470","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1220"}],"source":"psirt@amd.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges attacker to write to a trusted region used by AMD Secure Encrypted Virtualization-Encrypted State (SEV-ES), potentially resulting in loss of integrity."},{"lang":"es","value":"Insuficiente granularidad en el control de acceso en el firmware de AMD Secure Encrypted Virtualización (SEV) podría permitir a un atacante con privilegios administrativos escribir en una región confiable utilizada por AMD Secure Encrypted Virtualization - Estado Encrypted (SEV-ES), lo que potencialmente podría llevar a una pérdida de integridad.\n\nNota: He intentado mantener la misma estructura y la misma precisión en la traducción."}],"id":"CVE-2025-54504","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54504","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:39:44.566667Z","version":"2.0.3"}}]},"published":"2026-11-10T22:17:46.470","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1220"}],"source":"psirt@amd.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-54506.json b/data/2025/CVE-2025-54506.json
index 8c043205a4..9fd4a8dac5 100644
--- a/data/2025/CVE-2025-54506.json
+++ b/data/2025/CVE-2025-54506.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to bypass security checks on scatter lists, potentially resulting in loss of guest integrity."}],"id":"CVE-2025-54506","lastModified":"2026-11-13T00:20:05.110","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":4.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54506","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:37:22.980351Z","version":"2.0.3"}}]},"published":"2026-11-10T22:17:46.640","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-367"}],"source":"psirt@amd.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to bypass security checks on scatter lists, potentially resulting in loss of guest integrity."},{"lang":"es","value":"Aquí está la traducción:\n\nUna condición de carrera TOCTOU (tiempo de verificación y tiempo de uso) en el firmware de SEV (Seguridad Encrypted Virtualización) AMD Secure (SEV) podría permitir a un atacante con privilegios administrativos evitar las comprobaciones de seguridad en listas dispersas, lo que podría provocar la pérdida de integridad del huésped.\n\nNota: He utilizado un lenguaje técnico adecuado para mantener la precisión del original, pero también he intentado simplificar la frase para hacerla más fácil de entender para un público general."}],"id":"CVE-2025-54506","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":4.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54506","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:37:22.980351Z","version":"2.0.3"}}]},"published":"2026-11-10T22:17:46.640","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-367"}],"source":"psirt@amd.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-54507.json b/data/2025/CVE-2025-54507.json
index 0cfef79d60..aacf287ced 100644
--- a/data/2025/CVE-2025-54507.json
+++ b/data/2025/CVE-2025-54507.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.8"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper validation of consistency within input in AMD SEV (Secure Encrypted Virtualization) firmware could allow an attacker with administrative privileges to create multiple RMP entries for the same guest physical address, potentially resulting in loss of guest integrity."}],"id":"CVE-2025-54507","lastModified":"2026-11-13T02:18:48.537","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54507","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T00:16:17.805215Z","version":"2.0.3"}}]},"published":"2026-11-12T20:18:14.030","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3058.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1288"}],"source":"psirt@amd.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.8"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper validation of consistency within input in AMD SEV (Secure Encrypted Virtualization) firmware could allow an attacker with administrative privileges to create multiple RMP entries for the same guest physical address, potentially resulting in loss of guest integrity."},{"lang":"es","value":"A la hora de validar la consistencia de entrada en el firmware AMD SEV (Secured Encrypted Virtualization), hay un riesgo de que un atacante con privilegios administrativos pueda crear múltiples RMP (Resource Management Protocol) entries para la misma dirección física del huésped, lo que podría provocar una pérdida de integridad del huésped.\n\nNota: He mantenido el contexto técnico y la precisión en el traducción."}],"id":"CVE-2025-54507","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54507","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T00:16:17.805215Z","version":"2.0.3"}}]},"published":"2026-11-12T20:18:14.030","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3058.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1288"}],"source":"psirt@amd.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-54508.json b/data/2025/CVE-2025-54508.json
index a6c6838df2..e555693be7 100644
--- a/data/2025/CVE-2025-54508.json
+++ b/data/2025/CVE-2025-54508.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to trigger concurrent modifications to RMP entries without proper synchronization potentially resulting in loss of data integrity."}],"id":"CVE-2025-54508","lastModified":"2026-11-13T00:20:05.243","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":4.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54508","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:38:51.520840Z","version":"2.0.3"}}]},"published":"2026-11-10T22:17:46.807","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-179"}],"source":"psirt@amd.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to trigger concurrent modifications to RMP entries without proper synchronization potentially resulting in loss of data integrity."},{"lang":"es","value":"Aquí está la traducción:\n\nInvalidez inadecuada de las entradas de la Tabla de Mapeo Inverso (RMP) en el firmware de virtualización segura y cifrada (SEV)\n\nLa falta de validación adecuada de las entradas de la tabla de mapeo inverso (RMP) en el firmware de virtualización segura y cifrada (SEV) podría permitir a un atacante con privilegios desencadenar modificaciones concurrentes de las entradas de RMP sin sincronización adecuada, lo que potencialmente podría resultar en una pérdida de integridad de los datos.\n\nNota: He mantenido el contexto técnico y la precisión del texto original, manteniendo la estructura y el significado de la frase."}],"id":"CVE-2025-54508","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":4.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-54508","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:38:51.520840Z","version":"2.0.3"}}]},"published":"2026-11-10T22:17:46.807","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-179"}],"source":"psirt@amd.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-59847.json b/data/2025/CVE-2025-59847.json
index 519d6ee5fd..0d82662159 100644
--- a/data/2025/CVE-2025-59847.json
+++ b/data/2025/CVE-2025-59847.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"HCL Domino Leap","vendor":"HCL Software","versions":[{"status":"affected","version":"1.1.66 - 1.1.9"}]}],"source":"psirt@hcl.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an attacker to take over a user's session"}],"id":"CVE-2025-59847","lastModified":"2026-11-12T22:09:39.233","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.9,"impactScore":5.9,"source":"psirt@hcl.com","type":"Secondary"}]},"published":"2026-11-11T08:17:16.427","references":[{"source":"psirt@hcl.com","url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134535"}],"sourceIdentifier":"psirt@hcl.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"psirt@hcl.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"HCL Domino Leap","vendor":"HCL Software","versions":[{"status":"affected","version":"1.1.66 - 1.1.9"}]}],"source":"psirt@hcl.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an attacker to take over a user's session"},{"lang":"es","value":"Aquí está la traducción:\n\n“Domino Leap de HCL es vulnerable a XSS almacenado debido a títulos de aplicación maliciosos en los diálogos de la página de gestión, lo que permite al atacante tomar el control de la sesión de un usuario”.\n\nNota: El término “XSS” se traduce como “XSS almacenado”, ya que se refiere a un tipo específico de vulnerabilidad de seguridad conocida como “Stored Cross-Site Scripting”."}],"id":"CVE-2025-59847","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.9,"impactScore":5.9,"source":"psirt@hcl.com","type":"Secondary"}]},"published":"2026-11-11T08:17:16.427","references":[{"source":"psirt@hcl.com","url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134535"}],"sourceIdentifier":"psirt@hcl.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"psirt@hcl.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-59848.json b/data/2025/CVE-2025-59848.json
index 074b355c7a..9a7bdd7404 100644
--- a/data/2025/CVE-2025-59848.json
+++ b/data/2025/CVE-2025-59848.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"HCL Leap","vendor":"HCL Software","versions":[{"status":"affected","version":"9.3.88 - 9.2.10"}]}],"source":"psirt@hcl.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session"}],"id":"CVE-2025-59848","lastModified":"2026-11-12T22:09:39.233","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.9,"impactScore":5.9,"source":"psirt@hcl.com","type":"Secondary"}]},"published":"2026-11-11T08:17:16.603","references":[{"source":"psirt@hcl.com","url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134534"}],"sourceIdentifier":"psirt@hcl.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"psirt@hcl.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"HCL Leap","vendor":"HCL Software","versions":[{"status":"affected","version":"9.3.88 - 9.2.10"}]}],"source":"psirt@hcl.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session"},{"lang":"es","value":"La vulnerabilidad HCL Leap se debe a un Stored XSS (Cross-Site Scripting) causado por títulos maliciosos de aplicaciones en las diálogos de la página de administración “Manage”, lo que permite al atacante tomar el control de la sesión de un usuario."}],"id":"CVE-2025-59848","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.9,"impactScore":5.9,"source":"psirt@hcl.com","type":"Secondary"}]},"published":"2026-11-11T08:17:16.603","references":[{"source":"psirt@hcl.com","url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134534"}],"sourceIdentifier":"psirt@hcl.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"psirt@hcl.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-62621.json b/data/2025/CVE-2025-62621.json
index 454a995bd9..37873f9124 100644
--- a/data/2025/CVE-2025-62621.json
+++ b/data/2025/CVE-2025-62621.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially resulting in a loss of Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) guest memory integrity."}],"id":"CVE-2025-62621","lastModified":"2026-11-13T00:20:05.510","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-62621","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:40:18.597035Z","version":"2.0.3"}}]},"published":"2026-11-10T22:17:47.160","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-440"}],"source":"psirt@amd.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.A"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially resulting in a loss of Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) guest memory integrity."},{"lang":"es","value":"Violación de comportamiento esperado en firmware de SEV de AMD con cifrado seguro de virtualización podría permitir a un hipervisor malicioso evitar las protecciones de la Tabla de Mapeo Inverso (RMP), lo que podría provocar una pérdida de integridad de la memoria del huésped de SEV-SNP cifrada seguro-nested.”\n\nNota: He mantenido la estructura y el sentido original del texto, adaptándolo al contexto de la traducción al español."}],"id":"CVE-2025-62621","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-62621","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-12T23:40:18.597035Z","version":"2.0.3"}}]},"published":"2026-11-10T22:17:47.160","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-440"}],"source":"psirt@amd.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-71459.json b/data/2025/CVE-2025-71459.json
index d7ed94f3ef..0667dc6442 100644
--- a/data/2025/CVE-2025-71459.json
+++ b/data/2025/CVE-2025-71459.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:npm/zipline","product":"zipline","vendor":"diced","versions":[{"lessThanOrEqual":"4.3.2","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline through 4.3.2 contains a path traversal vulnerability that allows authenticated uploaders to write files outside the upload directory by supplying traversal sequences in the x-zipline-filename header. Attackers using the local datasource can create or overwrite files writable by the Zipline process, corrupting application data or disrupting service."}],"id":"CVE-2025-71459","lastModified":"2026-11-13T10:17:23.780","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:23.780","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-4jm6-mgwv-fq63"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-through-4.3.2-path-traversal-via-x-zipline-filename-header"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:npm/zipline","product":"zipline","vendor":"diced","versions":[{"lessThanOrEqual":"4.3.2","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline through 4.3.2 contains a path traversal vulnerability that allows authenticated uploaders to write files outside the upload directory by supplying traversal sequences in the x-zipline-filename header. Attackers using the local datasource can create or overwrite files writable by the Zipline process, corrupting application data or disrupting service."},{"lang":"es","value":"Recorrido por 4.3.2 incluye una vulnerabilidad de salto de ruta que permite que los submisores autenticados escriban archivos fuera del directorio de carga de submisión suministrando secuencias de traversión en el encabezado de nombre de archivo x-zipline-filename. Los atacantes utilizando el origen de datos local pueden crear o sobreescribir archivos que están escritos por el proceso de Zipline, corrompiendo los datos de la aplicación o interrumpiendo el servicio.”\n\nNota: He mantenido el contexto técnico y la precisión de la descripción original, mientras se adapta a la gramática y el estilo de la idioma español."}],"id":"CVE-2025-71459","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:23.780","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-4jm6-mgwv-fq63"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-through-4.3.2-path-traversal-via-x-zipline-filename-header"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
diff --git a/data/2025/CVE-2025-71460.json b/data/2025/CVE-2025-71460.json
index 4463aec188..e821f6cf90 100644
--- a/data/2025/CVE-2025-71460.json
+++ b/data/2025/CVE-2025-71460.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.2.1","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.2.1","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.2.1 contains a missing authorization vulnerability in the /api/user/files/transaction endpoint that allows authenticated users to modify other users' files due to absent ownership checks. Attackers who know a target file ID can submit transaction requests to edit or delete files belonging to any user."}],"id":"CVE-2025-71460","lastModified":"2026-11-13T10:17:23.940","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":4.2,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.6,"impactScore":2.5,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:23.940","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-26wv-mhc3-5xfq"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.2.1-missing-ownership-check-via-api-user-files-transaction"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.2.1","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.2.1","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.2.1 contains a missing authorization vulnerability in the /api/user/files/transaction endpoint that allows authenticated users to modify other users' files due to absent ownership checks. Attackers who know a target file ID can submit transaction requests to edit or delete files belonging to any user."},{"lang":"es","value":"Aquí está la traducción del texto:\n\n“Zipline antes de 4.2.1 contiene una vulnerabilidad de falta de autorización en el endpoint de transacción de archivos de usuario /api/user/files/ que permite a los usuarios autenticados modificar los archivos de otros usuarios debido a la ausencia de verificación de propiedad. Los atacantes que conocen el ID de un archivo objetivo pueden enviar solicitudes de transacción para editar o eliminar archivos de cualquier usuario”.\n\nNota: he mantenido el contexto técnico original y utilizado un lenguaje claro y conciso en el español."}],"id":"CVE-2025-71460","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":4.2,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.6,"impactScore":2.5,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:23.940","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-26wv-mhc3-5xfq"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.2.1-missing-ownership-check-via-api-user-files-transaction"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
diff --git a/data/2025/CVE-2025-71461.json b/data/2025/CVE-2025-71461.json
index ad91a5823e..a31d253f1e 100644
--- a/data/2025/CVE-2025-71461.json
+++ b/data/2025/CVE-2025-71461.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced"}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.0.2 contains a predictable filename vulnerability that allows attackers to infer other users' upload filenames by recovering the Math.random generator state. Attackers with five consecutive gfycat-style filenames can reconstruct the random state to predict previous and future filenames until the instance restarts, exposing private uploads."}],"id":"CVE-2025-71461","lastModified":"2026-11-13T10:17:24.100","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:24.100","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-6rg9-q9ww-w2rw"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.0.2-predictable-filenames-via-math-random-state-recovery"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-338"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced"}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.0.2 contains a predictable filename vulnerability that allows attackers to infer other users' upload filenames by recovering the Math.random generator state. Attackers with five consecutive gfycat-style filenames can reconstruct the random state to predict previous and future filenames until the instance restarts, exposing private uploads."},{"lang":"es","value":"La vulnerabilidad Zipline antes de la versión 4.0.2 contiene una vulnerabilidad de nombre de archivo predecible que permite a los atacantes inferir los nombres de archivo de subida de otros usuarios recuperando el estado del generador Math.random. Los atacantes con cinco nombres de archivo consecutivos de estilo gfycat pueden reconstruir el estado aleatorio para predecir nombres de archivo anteriores y futuros hasta que el inicio se reinicie, exponiendo cargas de archivo privadas."}],"id":"CVE-2025-71461","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:24.100","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-6rg9-q9ww-w2rw"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.0.2-predictable-filenames-via-math-random-state-recovery"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-338"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
diff --git a/data/2025/CVE-2025-71462.json b/data/2025/CVE-2025-71462.json
index 8af9e3d50c..7b60c2d190 100644
--- a/data/2025/CVE-2025-71462.json
+++ b/data/2025/CVE-2025-71462.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced","versions":[{"lessThan":"3.7.12","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"3.7.12","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 3.7.12 contains a cross-site scripting vulnerability in the login page that allows attackers to execute JavaScript by supplying an unvalidated url parameter. Attackers can craft a login link with a javascript: URI in the url parameter that executes in the victim's browser after login."}],"id":"CVE-2025-71462","lastModified":"2026-11-13T16:17:18.697","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-71462","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T15:30:54.975130Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:24.250","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-m288-p6wr-m6gv"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-3.7.12-xss-via-url-parameter-on-login-page"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced","versions":[{"lessThan":"3.7.12","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"3.7.12","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 3.7.12 contains a cross-site scripting vulnerability in the login page that allows attackers to execute JavaScript by supplying an unvalidated url parameter. Attackers can craft a login link with a javascript: URI in the url parameter that executes in the victim's browser after login."},{"lang":"es","value":"Zipline antes de 3.7.12 contiene una vulnerabilidad de script de sitio cruzado en la página de inicio de sesión que permite a los atacantes ejecutar código JavaScript suministrando un parámetro de URL no validado. Los atacantes pueden crear un enlace de inicio de sesión con una URI de javascript_protocol: en el parámetro de URL que ejecuta en el navegador del víctima después del inicio de sesión."}],"id":"CVE-2025-71462","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-71462","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T15:30:54.975130Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:24.250","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-m288-p6wr-m6gv"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-3.7.12-xss-via-url-parameter-on-login-page"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2025/CVE-2025-71463.json b/data/2025/CVE-2025-71463.json
index a03c75226a..63fa87f288 100644
--- a/data/2025/CVE-2025-71463.json
+++ b/data/2025/CVE-2025-71463.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:pypi/scapy","product":"scapy","vendor":"secdev","versions":[{"lessThan":"2.7.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"2.7.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Scapy before 2.7.0 contains an insecure deserialization vulnerability in the load_session function that allows attackers to execute code by supplying a malicious pickle session file. Attackers can trick users into loading a crafted .pkl.gz file via the -s option or conf.session, executing embedded Python code through __reduce__()."}],"id":"CVE-2025-71463","lastModified":"2026-11-13T10:17:24.403","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:24.403","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/secdev/scapy/security/advisories/GHSA-cq46-m9x9-j8w2"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/scapy-before-2.7.0-insecure-deserialization-rce-via-session-files"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:pypi/scapy","product":"scapy","vendor":"secdev","versions":[{"lessThan":"2.7.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"2.7.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Scapy before 2.7.0 contains an insecure deserialization vulnerability in the load_session function that allows attackers to execute code by supplying a malicious pickle session file. Attackers can trick users into loading a crafted .pkl.gz file via the -s option or conf.session, executing embedded Python code through __reduce__()."},{"lang":"es","value":"Scapy antes de la versión 2.7.0 contiene una vulnerabilidad de deserialización insegura en la función load_session que permite a los atacantes ejecutar código suministrando un archivo de sesión malicioso de pickle. Los atacantes pueden engañar a los usuarios para que carguen un archivo .pkl.gz fabricado a través de la opción -s o conf.session, ejecutando el código de Python embutido a través de __reduce__()”."}],"id":"CVE-2025-71463","lastModified":"2026-11-13T20:10:00.183","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:24.403","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/secdev/scapy/security/advisories/GHSA-cq46-m9x9-j8w2"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/scapy-before-2.7.0-insecure-deserialization-rce-via-session-files"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-0323.json b/data/2026/CVE-2026-0323.json
index e4ac611f07..ac030a70ea 100644
--- a/data/2026/CVE-2026-0323.json
+++ b/data/2026/CVE-2026-0323.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Checkov by Prisma Cloud","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"3.4.2","status":"unaffected"}],"lessThan":"3.4.2","status":"affected","version":"0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services."}],"id":"CVE-2026-0323","lastModified":"2026-11-11T20:16:59.383","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":1.1,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"PASSIVE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}]},"published":"2026-11-11T20:16:59.227","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0323"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-918"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Checkov by Prisma Cloud","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"3.4.2","status":"unaffected"}],"lessThan":"3.4.2","status":"affected","version":"0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services."}],"id":"CVE-2026-0323","lastModified":"2026-11-13T20:17:30.300","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":1.1,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"PASSIVE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0323","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:18:35.371383Z","version":"2.0.3"}}]},"published":"2026-11-11T20:16:59.227","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0323"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-918"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-0324.json b/data/2026/CVE-2026-0324.json
index 0ecbffe999..71bad6270e 100644
--- a/data/2026/CVE-2026-0324.json
+++ b/data/2026/CVE-2026-0324.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"MetaDefender Endpoint Security SDK","vendor":"OPSWAT","versions":[{"changes":[{"at":"4.3.4822","status":"unaffected"}],"lessThan":"4.3.4822","status":"affected","version":"4.3.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\\SYSTEM."}],"id":"CVE-2026-0324","lastModified":"2026-11-12T19:02:35.830","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:X/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}]},"published":"2026-11-11T20:16:59.480","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0324"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-266"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"MetaDefender Endpoint Security SDK","vendor":"OPSWAT","versions":[{"changes":[{"at":"4.3.4822","status":"unaffected"}],"lessThan":"4.3.4822","status":"affected","version":"4.3.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\\SYSTEM."}],"id":"CVE-2026-0324","lastModified":"2026-11-13T20:17:30.490","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:X/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0324","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:28:54.927839Z","version":"2.0.3"}}]},"published":"2026-11-11T20:16:59.480","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0324"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-266"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-0325.json b/data/2026/CVE-2026-0325.json
index e956106ed4..e5ba58d6a3 100644
--- a/data/2026/CVE-2026-0325.json
+++ b/data/2026/CVE-2026-0325.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"}]},{"defaultStatus":"affected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"status":"affected","version":"11.2.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.\n\nCloud NGFW is not affected by this vulnerability."}],"id":"CVE-2026-0325","lastModified":"2026-11-11T20:17:01.720","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"AUTOMATIC","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":1.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}]},"published":"2026-11-11T20:17:01.563","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0325"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-940"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"}]},{"defaultStatus":"affected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"status":"affected","version":"11.2.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.\n\nCloud NGFW is not affected by this vulnerability."}],"id":"CVE-2026-0325","lastModified":"2026-11-13T20:17:32.503","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"AUTOMATIC","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":1.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0325","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:17:55.763609Z","version":"2.0.3"}}]},"published":"2026-11-11T20:17:01.563","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0325"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-940"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-0326.json b/data/2026/CVE-2026-0326.json
index 2a983befbf..30d56bab2e 100644
--- a/data/2026/CVE-2026-0326.json
+++ b/data/2026/CVE-2026-0326.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"affected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption.\n\n\n\nPanorama and Prisma® Access are not affected by this vulnerability."}],"id":"CVE-2026-0326","lastModified":"2026-11-11T20:17:02.040","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":1.7,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}]},"published":"2026-11-11T20:17:01.890","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0326"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"affected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption.\n\n\n\nPanorama and Prisma® Access are not affected by this vulnerability."}],"id":"CVE-2026-0326","lastModified":"2026-11-13T20:17:33.667","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":1.7,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0326","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:14:27.098581Z","version":"2.0.3"}}]},"published":"2026-11-11T20:17:01.890","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0326"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-0327.json b/data/2026/CVE-2026-0327.json
index 5ee3102848..407cd6bb6a 100644
--- a/data/2026/CVE-2026-0327.json
+++ b/data/2026/CVE-2026-0327.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"status":"affected","version":"11.2.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user.\n\n\n\nCloud NGFW and Panorama are not affected by this vulnerability."}],"id":"CVE-2026-0327","lastModified":"2026-11-11T20:17:02.390","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}]},"published":"2026-11-11T20:17:02.240","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0327"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-426"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"status":"affected","version":"11.2.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user.\n\n\n\nCloud NGFW and Panorama are not affected by this vulnerability."}],"id":"CVE-2026-0327","lastModified":"2026-11-13T20:17:34.863","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0327","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:14:11.865052Z","version":"2.0.3"}}]},"published":"2026-11-11T20:17:02.240","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0327"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-426"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-0328.json b/data/2026/CVE-2026-0328.json
index 0e78737cce..332630574a 100644
--- a/data/2026/CVE-2026-0328.json
+++ b/data/2026/CVE-2026-0328.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h42:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h41:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"},{"at":"12.1.7-h12","status":"unaffected"},{"at":"12.1.4-h14","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"},{"at":"11.2.13-h5","status":"unaffected"},{"at":"11.2.10-h18","status":"unaffected"},{"at":"11.2.7-h24","status":"unaffected"},{"at":"11.2.4-h24","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"},{"at":"11.1.13-h17","status":"unaffected"},{"at":"11.1.10-h37","status":"unaffected"},{"at":"11.1.7-h13","status":"unaffected"},{"at":"11.1.6-h41","status":"unaffected"},{"at":"11.1.4-h39","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"},{"changes":[{"at":"10.2.18-h14","status":"unaffected"},{"at":"10.2.16-h13","status":"unaffected"},{"at":"10.2.13-h28","status":"unaffected"},{"at":"10.2.10-h43","status":"unaffected"},{"at":"10.2.7-h40","status":"unaffected"}],"lessThan":"10.2.18-h14","status":"affected","version":"10.2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software enables an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. \n\n\n\nPanorama, Cloud NGFW, and Prisma® Access are not affected by this vulnerability."}],"id":"CVE-2026-0328","lastModified":"2026-11-11T20:17:02.737","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.7,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}]},"published":"2026-11-11T20:17:02.577","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0328"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-287"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h42:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h41:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"},{"at":"12.1.7-h12","status":"unaffected"},{"at":"12.1.4-h14","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"},{"at":"11.2.13-h5","status":"unaffected"},{"at":"11.2.10-h18","status":"unaffected"},{"at":"11.2.7-h24","status":"unaffected"},{"at":"11.2.4-h24","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"},{"at":"11.1.13-h17","status":"unaffected"},{"at":"11.1.10-h37","status":"unaffected"},{"at":"11.1.7-h13","status":"unaffected"},{"at":"11.1.6-h41","status":"unaffected"},{"at":"11.1.4-h39","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"},{"changes":[{"at":"10.2.18-h14","status":"unaffected"},{"at":"10.2.16-h13","status":"unaffected"},{"at":"10.2.13-h28","status":"unaffected"},{"at":"10.2.10-h43","status":"unaffected"},{"at":"10.2.7-h40","status":"unaffected"}],"lessThan":"10.2.18-h14","status":"affected","version":"10.2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software enables an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. \n\n\n\nPanorama, Cloud NGFW, and Prisma® Access are not affected by this vulnerability."}],"id":"CVE-2026-0328","lastModified":"2026-11-13T20:17:36.023","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.7,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0328","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:12:25.210960Z","version":"2.0.3"}}]},"published":"2026-11-11T20:17:02.577","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0328"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-287"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-0329.json b/data/2026/CVE-2026-0329.json
index ac9c1dd2a0..55235967c2 100644
--- a/data/2026/CVE-2026-0329.json
+++ b/data/2026/CVE-2026-0329.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h42:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h41:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"},{"at":"12.1.7-h12","status":"unaffected"},{"at":"12.1.4-h14","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"},{"at":"11.2.13-h5","status":"unaffected"},{"at":"11.2.10-h18","status":"unaffected"},{"at":"11.2.7-h24","status":"unaffected"},{"at":"11.2.4-h24","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"},{"at":"11.1.13-h17","status":"unaffected"},{"at":"11.1.10-h37","status":"unaffected"},{"at":"11.1.7-h13","status":"unaffected"},{"at":"11.1.6-h41","status":"unaffected"},{"at":"11.1.4-h39","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"},{"changes":[{"at":"10.2.18-h14","status":"unaffected"},{"at":"10.2.16-h13","status":"unaffected"},{"at":"10.2.13-h28","status":"unaffected"},{"at":"10.2.10-h43","status":"unaffected"},{"at":"10.2.7-h40","status":"unaffected"}],"lessThan":"10.2.18-h14","status":"affected","version":"10.2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.7-h24","status":"unaffected"}],"lessThan":"11.2.7-h24","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"10.2.10-h43","status":"unaffected"}],"lessThan":"10.2.10-h43","status":"affected","version":"10.2.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface.\n\n\n\nCloud NGFW and Panorama are not affected by this vulnerability."}],"id":"CVE-2026-0329","lastModified":"2026-11-11T20:17:03.300","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":4.6,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}]},"published":"2026-11-11T20:17:03.140","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0329"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h42:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h41:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"},{"at":"12.1.7-h12","status":"unaffected"},{"at":"12.1.4-h14","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"},{"at":"11.2.13-h5","status":"unaffected"},{"at":"11.2.10-h18","status":"unaffected"},{"at":"11.2.7-h24","status":"unaffected"},{"at":"11.2.4-h24","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"},{"at":"11.1.13-h17","status":"unaffected"},{"at":"11.1.10-h37","status":"unaffected"},{"at":"11.1.7-h13","status":"unaffected"},{"at":"11.1.6-h41","status":"unaffected"},{"at":"11.1.4-h39","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"},{"changes":[{"at":"10.2.18-h14","status":"unaffected"},{"at":"10.2.16-h13","status":"unaffected"},{"at":"10.2.13-h28","status":"unaffected"},{"at":"10.2.10-h43","status":"unaffected"},{"at":"10.2.7-h40","status":"unaffected"}],"lessThan":"10.2.18-h14","status":"affected","version":"10.2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.7-h24","status":"unaffected"}],"lessThan":"11.2.7-h24","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"10.2.10-h43","status":"unaffected"}],"lessThan":"10.2.10-h43","status":"affected","version":"10.2.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface.\n\n\n\nCloud NGFW and Panorama are not affected by this vulnerability."}],"id":"CVE-2026-0329","lastModified":"2026-11-13T20:17:37.413","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":4.6,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0329","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:11:27.205393Z","version":"2.0.3"}}]},"published":"2026-11-11T20:17:03.140","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0329"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-0330.json b/data/2026/CVE-2026-0330.json
index ffe81510c9..9a00a206a4 100644
--- a/data/2026/CVE-2026-0330.json
+++ b/data/2026/CVE-2026-0330.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h16:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h22:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h16:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h35:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h40:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h39:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h38:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h37:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h27:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h26:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h42:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h41:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h39:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h38:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:Panorama:*"],"defaultStatus":"unaffected","platforms":["Panorama"],"product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"},{"at":"12.1.7-h12","status":"unaffected"},{"at":"12.1.4-h14","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"},{"at":"11.2.13-h5","status":"unaffected"},{"at":"11.2.10-h18","status":"unaffected"},{"at":"11.2.7-h24","status":"unaffected"},{"at":"11.2.4-h24","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"},{"at":"11.1.13-h17","status":"unaffected"},{"at":"11.1.10-h37","status":"unaffected"},{"at":"11.1.7-h13","status":"unaffected"},{"at":"11.1.6-h41","status":"unaffected"},{"at":"11.1.4-h39","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"},{"changes":[{"at":"10.2.18-h14","status":"unaffected"},{"at":"10.2.16-h13","status":"unaffected"},{"at":"10.2.13-h28","status":"unaffected"},{"at":"10.2.10-h43","status":"unaffected"},{"at":"10.2.7-h40","status":"unaffected"}],"lessThan":"10.2.18-h14","status":"affected","version":"10.2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges.\n\n\n\nThe security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\n\n\nCloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability."}],"id":"CVE-2026-0330","lastModified":"2026-11-11T20:17:03.937","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}]},"published":"2026-11-11T20:17:03.780","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0330"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h16:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h22:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h16:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h35:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h40:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h39:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h38:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h37:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h27:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h26:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h42:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h41:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h39:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h38:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:Panorama:*"],"defaultStatus":"unaffected","platforms":["Panorama"],"product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"},{"at":"12.1.7-h12","status":"unaffected"},{"at":"12.1.4-h14","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"},{"at":"11.2.13-h5","status":"unaffected"},{"at":"11.2.10-h18","status":"unaffected"},{"at":"11.2.7-h24","status":"unaffected"},{"at":"11.2.4-h24","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"},{"at":"11.1.13-h17","status":"unaffected"},{"at":"11.1.10-h37","status":"unaffected"},{"at":"11.1.7-h13","status":"unaffected"},{"at":"11.1.6-h41","status":"unaffected"},{"at":"11.1.4-h39","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"},{"changes":[{"at":"10.2.18-h14","status":"unaffected"},{"at":"10.2.16-h13","status":"unaffected"},{"at":"10.2.13-h28","status":"unaffected"},{"at":"10.2.10-h43","status":"unaffected"},{"at":"10.2.7-h40","status":"unaffected"}],"lessThan":"10.2.18-h14","status":"affected","version":"10.2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges.\n\n\n\nThe security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\n\n\nCloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability."}],"id":"CVE-2026-0330","lastModified":"2026-11-13T20:17:38.870","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0330","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:11:09.138212Z","version":"2.0.3"}}]},"published":"2026-11-11T20:17:03.780","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0330"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-0331.json b/data/2026/CVE-2026-0331.json
index d929fe0c31..16a701f835 100644
--- a/data/2026/CVE-2026-0331.json
+++ b/data/2026/CVE-2026-0331.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"affected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h42:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h41:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"},{"at":"12.1.7-h12","status":"unaffected"},{"at":"12.1.4-h14","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"},{"at":"11.2.13-h5","status":"unaffected"},{"at":"11.2.10-h18","status":"unaffected"},{"at":"11.2.7-h24","status":"unaffected"},{"at":"11.2.4-h24","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"},{"at":"11.1.13-h17","status":"unaffected"},{"at":"11.1.10-h37","status":"unaffected"},{"at":"11.1.7-h13","status":"unaffected"},{"at":"11.1.6-h41","status":"unaffected"},{"at":"11.1.4-h39","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"},{"changes":[{"at":"10.2.18-h14","status":"unaffected"},{"at":"10.2.16-h13","status":"unaffected"},{"at":"10.2.13-h28","status":"unaffected"},{"at":"10.2.10-h43","status":"unaffected"},{"at":"10.2.7-h40","status":"unaffected"}],"lessThan":"10.2.18-h14","status":"affected","version":"10.2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.7-h24","status":"unaffected"}],"lessThan":"11.2.7-h24","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"10.2.10-h43","status":"unaffected"}],"lessThan":"10.2.10-h43","status":"affected","version":"10.2.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access  to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface.\n\n\n\nPanorama is not affected by this vulnerability."}],"id":"CVE-2026-0331","lastModified":"2026-11-11T20:17:04.560","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}]},"published":"2026-11-11T20:17:04.380","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0331"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"affected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h42:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h41:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h39:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h38:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"},{"at":"12.1.7-h12","status":"unaffected"},{"at":"12.1.4-h14","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"},{"at":"11.2.13-h5","status":"unaffected"},{"at":"11.2.10-h18","status":"unaffected"},{"at":"11.2.7-h24","status":"unaffected"},{"at":"11.2.4-h24","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"},{"at":"11.1.13-h17","status":"unaffected"},{"at":"11.1.10-h37","status":"unaffected"},{"at":"11.1.7-h13","status":"unaffected"},{"at":"11.1.6-h41","status":"unaffected"},{"at":"11.1.4-h39","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"},{"changes":[{"at":"10.2.18-h14","status":"unaffected"},{"at":"10.2.16-h13","status":"unaffected"},{"at":"10.2.13-h28","status":"unaffected"},{"at":"10.2.10-h43","status":"unaffected"},{"at":"10.2.7-h40","status":"unaffected"}],"lessThan":"10.2.18-h14","status":"affected","version":"10.2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.7-h24","status":"unaffected"}],"lessThan":"11.2.7-h24","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"10.2.10-h43","status":"unaffected"}],"lessThan":"10.2.10-h43","status":"affected","version":"10.2.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access  to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface.\n\n\n\nPanorama is not affected by this vulnerability."}],"id":"CVE-2026-0331","lastModified":"2026-11-13T20:17:40.310","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0331","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:08:34.822137Z","version":"2.0.3"}}]},"published":"2026-11-11T20:17:04.380","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0331"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-100403.json b/data/2026/CVE-2026-100403.json
new file mode 100644
index 0000000000..34f61abfd5
--- /dev/null
+++ b/data/2026/CVE-2026-100403.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.4.6"},{"status":"affected","version":">= 1.5.0, < 1.5.2"},{"status":"affected","version":">= 1.6.0, < 1.6.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, the BACnet/SC hub's Linux WebSocket server reassembles fragmented WebSocket messages into a per-connection fragment_buffer. It grows that buffer with realloc() on every non-final frame, with no upper bound. A peer that streams binary continuation fragments and never sets FIN keeps the hub reallocating until the box runs out of memory or the process is OOM-killed. The buffer starts at the maximum legal BVLC-SC NPDU size, but nothing after that ties its growth back to that limit. This issue has been patched in versions 1.4.6, 1.5.2, 1.6.1, and 1.7.0."}],"id":"CVE-2026-100403","lastModified":"2026-11-13T19:17:36.427","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:17:36.427","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1433"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-4vgv-v5ph-rmxr"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-101533.json b/data/2026/CVE-2026-101533.json
index 723434fed4..c56d47ba47 100644
--- a/data/2026/CVE-2026-101533.json
+++ b/data/2026/CVE-2026-101533.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Oracle EDI Gateway","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI Gateway.  Successful attacks of this vulnerability can result in takeover of Oracle EDI Gateway. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101533","lastModified":"2026-11-06T21:17:05.003","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.7,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101533","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-06T20:21:52.038533Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:02.643","references":[{"source":"secalert_us@oracle.com","url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Oracle EDI Gateway","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"6F291BF4-E862-47A3-8BFC-C7949CD5AC93","versionEndIncluding":"12.2.15","versionStartIncluding":"12.2.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI Gateway.  Successful attacks of this vulnerability can result in takeover of Oracle EDI Gateway. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101533","lastModified":"2026-11-13T20:08:53.607","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.7,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101533","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-06T20:21:52.038533Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:02.643","references":[{"source":"secalert_us@oracle.com","tags":["Vendor Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-101534.json b/data/2026/CVE-2026-101534.json
index 1d5fd90134..16fa408239 100644
--- a/data/2026/CVE-2026-101534.json
+++ b/data/2026/CVE-2026-101534.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Oracle EDI Gateway","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle EDI Gateway.  While the vulnerability is in Oracle EDI Gateway, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle EDI Gateway accessible data as well as  unauthorized update, insert or delete access to some of Oracle EDI Gateway accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N)."}],"id":"CVE-2026-101534","lastModified":"2026-11-06T20:17:06.040","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":4.7,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101534","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-06T20:10:06.466688Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:02.763","references":[{"source":"secalert_us@oracle.com","url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Oracle EDI Gateway","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"6F291BF4-E862-47A3-8BFC-C7949CD5AC93","versionEndIncluding":"12.2.15","versionStartIncluding":"12.2.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle EDI Gateway.  While the vulnerability is in Oracle EDI Gateway, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle EDI Gateway accessible data as well as  unauthorized update, insert or delete access to some of Oracle EDI Gateway accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N)."}],"id":"CVE-2026-101534","lastModified":"2026-11-13T20:09:38.803","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":4.7,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101534","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-06T20:10:06.466688Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:02.763","references":[{"source":"secalert_us@oracle.com","tags":["Vendor Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-101535.json b/data/2026/CVE-2026-101535.json
index 54c3a7c7b6..ab9cfb6f8d 100644
--- a/data/2026/CVE-2026-101535.json
+++ b/data/2026/CVE-2026-101535.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Oracle Sales Foundation","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Foundation.  Successful attacks of this vulnerability can result in takeover of Oracle Sales Foundation. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101535","lastModified":"2026-11-05T19:17:04.177","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101535","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-05T18:08:49.041166Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:02.880","references":[{"source":"secalert_us@oracle.com","url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Oracle Sales Foundation","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"6F291BF4-E862-47A3-8BFC-C7949CD5AC93","versionEndIncluding":"12.2.15","versionStartIncluding":"12.2.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Foundation.  Successful attacks of this vulnerability can result in takeover of Oracle Sales Foundation. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101535","lastModified":"2026-11-13T20:10:02.440","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101535","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-05T18:08:49.041166Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:02.880","references":[{"source":"secalert_us@oracle.com","tags":["Vendor Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-101536.json b/data/2026/CVE-2026-101536.json
index bf9aee7502..82adda0029 100644
--- a/data/2026/CVE-2026-101536.json
+++ b/data/2026/CVE-2026-101536.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Oracle Cost Management","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management.  Successful attacks of this vulnerability can result in takeover of Oracle Cost Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101536","lastModified":"2026-11-05T19:17:04.350","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101536","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-05T18:08:36.699343Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:03.003","references":[{"source":"secalert_us@oracle.com","url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Oracle Cost Management","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:cost_management:*:*:*:*:*:*:*:*","matchCriteriaId":"35C203B9-FEFF-4149-A549-E589F043EADF","versionEndIncluding":"12.2.15","versionStartIncluding":"12.2.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management.  Successful attacks of this vulnerability can result in takeover of Oracle Cost Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101536","lastModified":"2026-11-13T20:12:13.043","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101536","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-05T18:08:36.699343Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:03.003","references":[{"source":"secalert_us@oracle.com","tags":["Vendor Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-101546.json b/data/2026/CVE-2026-101546.json
index 080b28ddc5..b953df42a9 100644
--- a/data/2026/CVE-2026-101546.json
+++ b/data/2026/CVE-2026-101546.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Oracle Materials Requirement Planning","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Materials Requirement Planning.  Successful attacks of this vulnerability can result in takeover of Oracle Materials Requirement Planning. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101546","lastModified":"2026-11-05T19:17:04.900","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101546","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-05T18:07:58.972893Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:04.200","references":[{"source":"secalert_us@oracle.com","url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Oracle Materials Requirement Planning","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"6F291BF4-E862-47A3-8BFC-C7949CD5AC93","versionEndIncluding":"12.2.15","versionStartIncluding":"12.2.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Materials Requirement Planning.  Successful attacks of this vulnerability can result in takeover of Oracle Materials Requirement Planning. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101546","lastModified":"2026-11-13T20:19:58.490","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101546","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-05T18:07:58.972893Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:04.200","references":[{"source":"secalert_us@oracle.com","tags":["Vendor Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-101552.json b/data/2026/CVE-2026-101552.json
index acbf100756..32f7762dec 100644
--- a/data/2026/CVE-2026-101552.json
+++ b/data/2026/CVE-2026-101552.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Oracle Application Object Library","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library.  Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101552","lastModified":"2026-11-05T19:17:05.090","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101552","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-05T18:07:46.571818Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:04.793","references":[{"source":"secalert_us@oracle.com","url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Oracle Application Object Library","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:application_object_library:*:*:*:*:*:*:*:*","matchCriteriaId":"4E5B77B9-571D-4079-9206-4256F52C6660","versionEndIncluding":"12.2.15","versionStartIncluding":"12.2.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library.  Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101552","lastModified":"2026-11-13T20:21:41.053","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101552","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-05T18:07:46.571818Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:04.793","references":[{"source":"secalert_us@oracle.com","tags":["Vendor Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-101566.json b/data/2026/CVE-2026-101566.json
index 8f9d0ba529..315d741f2f 100644
--- a/data/2026/CVE-2026-101566.json
+++ b/data/2026/CVE-2026-101566.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Oracle Application Object Library","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Object Library executes to compromise Oracle Application Object Library.  Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101566","lastModified":"2026-11-03T16:17:17.810","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101566","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-03T04:55:56.295760Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:08.467","references":[{"source":"secalert_us@oracle.com","url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Oracle Application Object Library","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:application_object_library:*:*:*:*:*:*:*:*","matchCriteriaId":"4E5B77B9-571D-4079-9206-4256F52C6660","versionEndIncluding":"12.2.15","versionStartIncluding":"12.2.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Object Library executes to compromise Oracle Application Object Library.  Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101566","lastModified":"2026-11-13T20:22:51.017","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101566","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-03T04:55:56.295760Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:08.467","references":[{"source":"secalert_us@oracle.com","tags":["Vendor Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-101567.json b/data/2026/CVE-2026-101567.json
index 818a579f5e..fc46919ed3 100644
--- a/data/2026/CVE-2026-101567.json
+++ b/data/2026/CVE-2026-101567.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Oracle Cost Management","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management.  Successful attacks of this vulnerability can result in takeover of Oracle Cost Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101567","lastModified":"2026-10-29T11:17:21.797","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101567","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-24T03:55:36.847295Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:08.693","references":[{"source":"secalert_us@oracle.com","url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Oracle Cost Management","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"12.2.15","status":"affected","version":"12.2.3","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"6F291BF4-E862-47A3-8BFC-C7949CD5AC93","versionEndIncluding":"12.2.15","versionStartIncluding":"12.2.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management.  Successful attacks of this vulnerability can result in takeover of Oracle Cost Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."}],"id":"CVE-2026-101567","lastModified":"2026-11-13T20:23:29.103","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101567","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-24T03:55:36.847295Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:08.693","references":[{"source":"secalert_us@oracle.com","tags":["Vendor Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-101569.json b/data/2026/CVE-2026-101569.json
index 4495c7d339..ab4c0355c0 100644
--- a/data/2026/CVE-2026-101569.json
+++ b/data/2026/CVE-2026-101569.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Helidon","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"4.5.5","status":"affected","version":"4.0.0","versionType":"custom"},{"status":"affected","version":"27.0.0","versionType":"semver"}]}],"source":"secalert_us@oracle.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits).  Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)."}],"id":"CVE-2026-101569","lastModified":"2026-10-22T19:17:34.120","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101569","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-22T18:47:21.459685Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:09.053","references":[{"source":"secalert_us@oracle.com","url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Helidon","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"4.5.5","status":"affected","version":"4.0.0","versionType":"custom"},{"status":"affected","version":"27.0.0","versionType":"semver"}]}],"source":"secalert_us@oracle.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:helidon:*:*:*:*:*:*:*:*","matchCriteriaId":"991BB386-5622-47E2-A23E-59F643E10626","versionEndIncluding":"4.5.5","versionStartIncluding":"4.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:helidon:27.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5C1F7AB3-27A5-481E-B419-21EF42BAAAE4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits).  Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Helidon accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)."}],"id":"CVE-2026-101569","lastModified":"2026-11-13T20:27:57.730","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101569","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-22T18:47:21.459685Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:09.053","references":[{"source":"secalert_us@oracle.com","tags":["Vendor Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-101570.json b/data/2026/CVE-2026-101570.json
index d9d50ad3f5..379494876c 100644
--- a/data/2026/CVE-2026-101570.json
+++ b/data/2026/CVE-2026-101570.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Helidon","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"4.5.5","status":"affected","version":"4.0.0","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2).  Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."}],"id":"CVE-2026-101570","lastModified":"2026-10-29T02:16:44.420","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101570","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-29T01:48:11.626239Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:10.187","references":[{"source":"secalert_us@oracle.com","url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Helidon","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"4.5.5","status":"affected","version":"4.0.0","versionType":"custom"}]}],"source":"secalert_us@oracle.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:helidon:*:*:*:*:*:*:*:*","matchCriteriaId":"991BB386-5622-47E2-A23E-59F643E10626","versionEndIncluding":"4.5.5","versionStartIncluding":"4.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2).  Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."}],"id":"CVE-2026-101570","lastModified":"2026-11-13T20:32:06.893","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"secalert_us@oracle.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-101570","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-29T01:48:11.626239Z","version":"2.0.3"}}]},"published":"2026-10-20T22:18:10.187","references":[{"source":"secalert_us@oracle.com","tags":["Vendor Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"sourceIdentifier":"secalert_us@oracle.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-102537.json b/data/2026/CVE-2026-102537.json
new file mode 100644
index 0000000000..9740e29f82
--- /dev/null
+++ b/data/2026/CVE-2026-102537.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.4.6"},{"status":"affected","version":">= 1.5.0, < 1.5.2"},{"status":"affected","version":">= 1.6.0, < 1.6.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, bws_cli_connect() in ports/linux/websocket-cli.c loads the trusted CA cert into the libwebsockets context, then always sets LCCSCF_ALLOW_SELFSIGNED in the connection flags. So lws accepts any self-signed hub certificate, whether or not it chains to the loaded CA. A BACnet/SC node finishes the TLS handshake to a rogue hub that presents a self-signed cert. It then hands the attacker its identity (VMAC, UUID) and all later BACnet traffic. This issue has been patched in versions 1.4.6, 1.5.2, 1.6.1, and 1.7.0."}],"id":"CVE-2026-102537","lastModified":"2026-11-13T19:17:37.470","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":7.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:17:37.470","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1434"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-jgm4-2wg9-jwfg"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-295"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-102612.json b/data/2026/CVE-2026-102612.json
new file mode 100644
index 0000000000..f700a40fa4
--- /dev/null
+++ b/data/2026/CVE-2026-102612.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.4.6"},{"status":"affected","version":">= 1.5.0, < 1.5.2"},{"status":"affected","version":">= 1.6.0, < 1.6.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, bws_srv_start() in ports/linux/websocket-srv.c builds the libwebsockets server context with a CA certificate loaded but never sets LWS_SERVER_OPTION_REQUIRE_VALID_OPENSSL_CLIENT_CERT, so the hub accepts TLS connections from clients presenting no certificate at all. Any network-reachable host can join the BACnet/SC mesh without credentials. This issue has been patched in versions 1.4.6, 1.5.2, 1.6.1, and 1.7.0."}],"id":"CVE-2026-102612","lastModified":"2026-11-13T19:17:37.630","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:17:37.630","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1436"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-92q2-p4vr-fvmp"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-295"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-104204.json b/data/2026/CVE-2026-104204.json
new file mode 100644
index 0000000000..508f274581
--- /dev/null
+++ b/data/2026/CVE-2026-104204.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.6.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.6.1, there is a server-side denial-of-service issue affecting the Structured View object implementation. This issue has been patched in versions 1.6.1 and 1.7.0."}],"id":"CVE-2026-104204","lastModified":"2026-11-13T19:17:37.973","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:17:37.973","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1437"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-hg85-pmm3-jfcf"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-105544.json b/data/2026/CVE-2026-105544.json
index 8cd03bca3f..21d20e38a8 100644
--- a/data/2026/CVE-2026-105544.json
+++ b/data/2026/CVE-2026-105544.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":".NET 10.0 installed on Linux","vendor":"Microsoft","versions":[{"lessThan":"10.0.404","status":"affected","version":"10.0.0","versionType":"custom"}]},{"product":".NET 10.0 installed on Mac OS","vendor":"Microsoft","versions":[{"lessThan":"10.0.404","status":"affected","version":"10.0.0","versionType":"custom"}]},{"product":".NET 10.0 installed on Windows","vendor":"Microsoft","versions":[{"lessThan":"10.0.404","status":"affected","version":"10.0.0","versionType":"custom"}]},{"product":".NET 11.0 installed on Linux","vendor":"Microsoft","versions":[{"lessThan":"11.0.100","status":"affected","version":"11.0.0-preview.1","versionType":"custom"}]},{"product":".NET 11.0 installed on Mac OS","vendor":"Microsoft","versions":[{"lessThan":"11.0.100","status":"affected","version":"11.0.0-preview.1","versionType":"custom"}]},{"product":".NET 11.0 installed on Windows","vendor":"Microsoft","versions":[{"lessThan":"11.0.100","status":"affected","version":"11.0.0-preview.1","versionType":"custom"}]},{"product":".NET 8.0 installed on Linux","vendor":"Microsoft","versions":[{"lessThan":"8.0.428","status":"affected","version":"8.0.0","versionType":"custom"}]},{"product":".NET 8.0 installed on Mac OS","vendor":"Microsoft","versions":[{"lessThan":"8.0.428","status":"affected","version":"8.0.0","versionType":"custom"}]},{"product":".NET 8.0 installed on Windows","vendor":"Microsoft","versions":[{"lessThan":"8.0.428","status":"affected","version":"8.0.0","versionType":"custom"}]},{"product":".NET 9.0 installed on Linux","vendor":"Microsoft","versions":[{"lessThan":"9.0.321","status":"affected","version":"9.0.0","versionType":"custom"}]},{"product":".NET 9.0 installed on Mac OS","vendor":"Microsoft","versions":[{"lessThan":"9.0.321","status":"affected","version":"9.0.0","versionType":"custom"}]},{"product":".NET 9.0 installed on Windows","vendor":"Microsoft","versions":[{"lessThan":"9.0.321","status":"affected","version":"9.0.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2022 version 17.14","vendor":"Microsoft","versions":[{"lessThan":"17.14.45","status":"affected","version":"17.14.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2026 version 18.11","vendor":"Microsoft","versions":[{"lessThan":"18.11.4","status":"affected","version":"18.11.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2026 version 18.12","vendor":"Microsoft","versions":[{"lessThan":"18.12.0","status":"affected","version":"18.12.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI","vendor":"Microsoft","versions":[{"lessThan":"18.11.1","status":"affected","version":"17.2.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control in .NET allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-105544","lastModified":"2026-11-11T12:18:20.923","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":6.0,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-105544","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T21:06:05.419818Z","version":"2.0.3"}}]},"published":"2026-11-10T19:17:56.330","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105544"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-15"}],"source":"secure@microsoft.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":".NET 10.0 installed on Linux","vendor":"Microsoft","versions":[{"lessThan":"10.0.404","status":"affected","version":"10.0.0","versionType":"custom"}]},{"product":".NET 10.0 installed on Mac OS","vendor":"Microsoft","versions":[{"lessThan":"10.0.404","status":"affected","version":"10.0.0","versionType":"custom"}]},{"product":".NET 10.0 installed on Windows","vendor":"Microsoft","versions":[{"lessThan":"10.0.404","status":"affected","version":"10.0.0","versionType":"custom"}]},{"product":".NET 11.0 installed on Linux","vendor":"Microsoft","versions":[{"lessThan":"11.0.100","status":"affected","version":"11.0.0-preview.1","versionType":"custom"}]},{"product":".NET 11.0 installed on Mac OS","vendor":"Microsoft","versions":[{"lessThan":"11.0.100","status":"affected","version":"11.0.0-preview.1","versionType":"custom"}]},{"product":".NET 11.0 installed on Windows","vendor":"Microsoft","versions":[{"lessThan":"11.0.100","status":"affected","version":"11.0.0-preview.1","versionType":"custom"}]},{"product":".NET 8.0 installed on Linux","vendor":"Microsoft","versions":[{"lessThan":"8.0.428","status":"affected","version":"8.0.0","versionType":"custom"}]},{"product":".NET 8.0 installed on Mac OS","vendor":"Microsoft","versions":[{"lessThan":"8.0.428","status":"affected","version":"8.0.0","versionType":"custom"}]},{"product":".NET 8.0 installed on Windows","vendor":"Microsoft","versions":[{"lessThan":"8.0.428","status":"affected","version":"8.0.0","versionType":"custom"}]},{"product":".NET 9.0 installed on Linux","vendor":"Microsoft","versions":[{"lessThan":"9.0.321","status":"affected","version":"9.0.0","versionType":"custom"}]},{"product":".NET 9.0 installed on Mac OS","vendor":"Microsoft","versions":[{"lessThan":"9.0.321","status":"affected","version":"9.0.0","versionType":"custom"}]},{"product":".NET 9.0 installed on Windows","vendor":"Microsoft","versions":[{"lessThan":"9.0.321","status":"affected","version":"9.0.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2022 version 17.14","vendor":"Microsoft","versions":[{"lessThan":"17.14.45","status":"affected","version":"17.14.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2026 version 18.11","vendor":"Microsoft","versions":[{"lessThan":"18.11.4","status":"affected","version":"18.11.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2026 version 18.12","vendor":"Microsoft","versions":[{"lessThan":"18.12.0","status":"affected","version":"18.12.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.10.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.10.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.10.0-preview-24080-01","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.10.0-preview-24080-01","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.10.0-release-24177-07","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.10.0-release-24177-07","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.11","vendor":"Microsoft","versions":[{"lessThan":"17.11.2","status":"affected","version":"17.11.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.11.0-release-24352-06","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.11.0-release-24352-06","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.11.0-release-24373-02","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.11.0-release-24373-02","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.12","vendor":"Microsoft","versions":[{"lessThan":"17.12.1","status":"affected","version":"17.12.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.13.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.13.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.14","vendor":"Microsoft","versions":[{"lessThan":"17.14.2","status":"affected","version":"17.14.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.14.0-preview-25107-01","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.14.0-preview-25107-01","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.3","vendor":"Microsoft","versions":[{"lessThan":"17.3.4","status":"affected","version":"17.2.0-preview-20220301-01","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.3.0-preview-20220426-02","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.3.0-preview-20220426-02","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.3.0-preview-20220530-08","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.3.0-preview-20220530-08","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.3.0-preview-20220612-01","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.3.0-preview-20220612-01","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.4.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.4.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.4.0-preview-20220707-01","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.4.0-preview-20220707-01","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.4.0-preview-20220726-02","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.4.0-preview-20220726-02","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.4.0-preview-20221003-03","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.4.0-preview-20221003-03","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.4.0-release-20220926-01","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.4.0-release-20220926-01","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.4.1","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.4.1","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.5.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.5.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.5.0-preview-20221003-04","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.5.0-preview-20221003-04","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.5.0-preview-20221221-03","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.5.0-preview-20221221-03","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.6.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.6.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.6.0-preview-20230223-05","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.6.0-preview-20230223-05","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.6.1","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.6.1","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.6.2","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.6.2","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.6.3","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.6.3","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.7.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.7.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.7.0-preview-23364-03","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.7.0-preview-23364-03","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.7.0-preview.23280.1","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.7.0-preview.23280.1","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.7.1","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.7.1","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.7.2","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.7.2","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.8","vendor":"Microsoft","versions":[{"lessThan":"17.8.1","status":"affected","version":"17.8.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.8.0-preview-23371-04","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.8.0-preview-23371-04","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.8.0-preview-23424-02","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.8.0-preview-23424-02","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.8.0-release-23468-02","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.8.0-release-23468-02","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.9.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.9.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.9.0-preview-23503-02","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.9.0-preview-23503-02","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.9.0-preview-23531-01","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.9.0-preview-23531-01","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.9.0-preview-23577-04","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.9.0-preview-23577-04","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 17.9.0-release-23619-01","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"17.9.0-release-23619-01","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.0","vendor":"Microsoft","versions":[{"lessThan":"18.0.2","status":"affected","version":"18.0.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.10","vendor":"Microsoft","versions":[{"lessThan":"18.10.2","status":"affected","version":"18.10.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.11","vendor":"Microsoft","versions":[{"lessThan":"18.11.1","status":"affected","version":"18.11.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.3.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"18.3.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.4.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"18.4.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.5.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"18.5.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.5.1","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"18.5.1","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.6.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"18.6.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.7","vendor":"Microsoft","versions":[{"lessThan":"18.7.1","status":"affected","version":"18.7.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.8.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"18.8.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.8.1","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"18.8.1","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI version 18.9.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"18.9.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control in .NET allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-105544","lastModified":"2026-11-13T19:17:44.807","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":6.0,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-105544","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T21:06:05.419818Z","version":"2.0.3"}}]},"published":"2026-11-10T19:17:56.330","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105544"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-15"}],"source":"secure@microsoft.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-105625.json b/data/2026/CVE-2026-105625.json
index 0a489dab93..2c57ca0dc1 100644
--- a/data/2026/CVE-2026-105625.json
+++ b/data/2026/CVE-2026-105625.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Zenitel Connect","vendor":"Zenitel","versions":[{"lessThan":"1.11.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The web interface in Zenitel Connect before 1.11.0 loads an integration iframe without sandboxing or origin restrictions, which allows remote attackers to present phishing content to authenticated users via a crafted frame source."}],"id":"CVE-2026-105625","lastModified":"2026-11-13T16:17:23.227","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]},"published":"2026-11-13T16:17:23.227","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-1021"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Zenitel Connect","vendor":"Zenitel","versions":[{"lessThan":"1.11.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The web interface in Zenitel Connect before 1.11.0 loads an integration iframe without sandboxing or origin restrictions, which allows remote attackers to present phishing content to authenticated users via a crafted frame source."}],"id":"CVE-2026-105625","lastModified":"2026-11-13T20:17:42.100","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-105625","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:52:51.251365Z","version":"2.0.3"}}]},"published":"2026-11-13T16:17:23.227","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-1021"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-105671.json b/data/2026/CVE-2026-105671.json
index 3b1bbda64a..5d15d4e583 100644
--- a/data/2026/CVE-2026-105671.json
+++ b/data/2026/CVE-2026-105671.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Zenitel Connect","vendor":"Zenitel","versions":[{"lessThan":"1.11.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The login flow in Zenitel Connect before 1.11.0 returns different error responses depending on whether a submitted username exists, which allows remote attackers to enumerate valid user accounts via crafted login requests."}],"id":"CVE-2026-105671","lastModified":"2026-11-13T16:17:23.350","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]},"published":"2026-11-13T16:17:23.350","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-204"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Zenitel Connect","vendor":"Zenitel","versions":[{"lessThan":"1.11.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The login flow in Zenitel Connect before 1.11.0 returns different error responses depending on whether a submitted username exists, which allows remote attackers to enumerate valid user accounts via crafted login requests."}],"id":"CVE-2026-105671","lastModified":"2026-11-13T20:17:43.600","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-105671","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:53:08.383290Z","version":"2.0.3"}}]},"published":"2026-11-13T16:17:23.350","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-204"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-112182.json b/data/2026/CVE-2026-112182.json
index 594ed60feb..f2c985b9b4 100644
--- a/data/2026/CVE-2026-112182.json
+++ b/data/2026/CVE-2026-112182.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"OpenKM Community Edition","vendor":"OpenKM","versions":[{"status":"affected","version":"6.3.12"},{"status":"affected","version":"6.3.13"}]}],"source":"cve-coordination@incibe.es"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Unauthorization vulnerability in the management of workflow definitions in OpenKM Community Edition. The REST endpoints `registerProcessDefinition` and `runProcessDefinition` require authentication but do not verify roles in the WorkflowService or in lower layers. An attacker with the `ROLE_USER` role can register and execute a process definition containing BeanShell scripts, allowing them to execute Java code and operating system commands with the service’s privileges. In the official Docker image, the process runs as root."}],"id":"CVE-2026-112182","lastModified":"2026-11-13T11:17:15.913","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cve-coordination@incibe.es","type":"Secondary"}]},"published":"2026-11-13T11:17:15.913","references":[{"source":"cve-coordination@incibe.es","url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-openkm-community-edition"}],"sourceIdentifier":"cve-coordination@incibe.es","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"cve-coordination@incibe.es","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"OpenKM Community Edition","vendor":"OpenKM","versions":[{"status":"affected","version":"6.3.12"},{"status":"affected","version":"6.3.13"}]}],"source":"cve-coordination@incibe.es"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Unauthorization vulnerability in the management of workflow definitions in OpenKM Community Edition. The REST endpoints `registerProcessDefinition` and `runProcessDefinition` require authentication but do not verify roles in the WorkflowService or in lower layers. An attacker with the `ROLE_USER` role can register and execute a process definition containing BeanShell scripts, allowing them to execute Java code and operating system commands with the service’s privileges. In the official Docker image, the process runs as root."}],"id":"CVE-2026-112182","lastModified":"2026-11-13T20:17:45.833","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cve-coordination@incibe.es","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-112182","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:29:12.869897Z","version":"2.0.3"}}]},"published":"2026-11-13T11:17:15.913","references":[{"source":"cve-coordination@incibe.es","url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-openkm-community-edition"}],"sourceIdentifier":"cve-coordination@incibe.es","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"cve-coordination@incibe.es","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-113749.json b/data/2026/CVE-2026-113749.json
index e3f23a1d67..1dfc844fe4 100644
--- a/data/2026/CVE-2026-113749.json
+++ b/data/2026/CVE-2026-113749.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network."}],"id":"CVE-2026-113749","lastModified":"2026-11-10T21:18:51.760","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-113749","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T20:14:45.681113Z","version":"2.0.3"}}]},"published":"2026-11-10T19:18:52.763","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113749"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"},{"lang":"en","value":"CWE-190"}],"source":"secure@microsoft.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Microsoft Office for Android","vendor":"Microsoft","versions":[{"lessThan":"16.0.20625.20014","status":"affected","version":"16.0.1","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network."}],"id":"CVE-2026-113749","lastModified":"2026-11-13T19:18:24.577","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-113749","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T20:14:45.681113Z","version":"2.0.3"}}]},"published":"2026-11-10T19:18:52.763","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113749"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"},{"lang":"en","value":"CWE-190"}],"source":"secure@microsoft.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-114032.json b/data/2026/CVE-2026-114032.json
index e0749040c6..acfaf45dff 100644
--- a/data/2026/CVE-2026-114032.json
+++ b/data/2026/CVE-2026-114032.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Core Ven","vendor":"Illumio","versions":[{"lessThan":"26.2.20","status":"affected","version":"24.2.20","versionType":"semver"}]}],"source":"security@illumio.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with SYSTEM privileges."}],"id":"CVE-2026-114032","lastModified":"2026-11-12T22:09:39.233","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"security@illumio.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-114032","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-12T17:14:02.415605Z","version":"2.0.3"}}]},"published":"2026-11-09T22:18:27.397","references":[{"source":"security@illumio.com","url":"https://product-docs-repo.illumio.com/Tech-Docs/Security+Advisories/out/en/security-advisories/untrusted-openssl-configuration-load-in-the-windows-ven.html"}],"sourceIdentifier":"security@illumio.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-427"}],"source":"security@illumio.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Core Ven","vendor":"Illumio","versions":[{"lessThan":"26.2.20","status":"affected","version":"24.2.20","versionType":"semver"}]}],"source":"security@illumio.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL library bundled with the Illumio VEN is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with elevated privileges."}],"id":"CVE-2026-114032","lastModified":"2026-11-13T20:17:48.917","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"security@illumio.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-114032","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-12T17:14:02.415605Z","version":"2.0.3"}}]},"published":"2026-11-09T22:18:27.397","references":[{"source":"security@illumio.com","url":"https://product-docs-repo.illumio.com/Tech-Docs/Security+Advisories/out/en/security-advisories/untrusted-openssl-configuration-load-in-the-windows-ven.html"}],"sourceIdentifier":"security@illumio.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-427"}],"source":"security@illumio.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-114160.json b/data/2026/CVE-2026-114160.json
index be5af305dd..663ed31bc9 100644
--- a/data/2026/CVE-2026-114160.json
+++ b/data/2026/CVE-2026-114160.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Azure Managed Grafana","vendor":"Microsoft","versions":[{"status":"affected","version":"-"}]}],"source":"secure@microsoft.com"}],"cveTags":[{"sourceIdentifier":"secure@microsoft.com","tags":["exclusively-hosted-service"]}],"descriptions":[{"lang":"en","value":"Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network."}],"id":"CVE-2026-114160","lastModified":"2026-11-11T02:17:08.860","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-114160","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T01:37:58.462096Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:09.527","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114160"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-918"}],"source":"secure@microsoft.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Azure Managed Grafana","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"1.0.0.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[{"sourceIdentifier":"secure@microsoft.com","tags":["exclusively-hosted-service"]}],"descriptions":[{"lang":"en","value":"Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network."}],"id":"CVE-2026-114160","lastModified":"2026-11-13T19:18:31.743","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-114160","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T01:37:58.462096Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:09.527","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114160"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-918"}],"source":"secure@microsoft.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-114713.json b/data/2026/CVE-2026-114713.json
index 5fc3d65dfa..0a2cb9757a 100644
--- a/data/2026/CVE-2026-114713.json
+++ b/data/2026/CVE-2026-114713.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["labeled-response"],"product":"UnrealIRCd","programFiles":["src/modules/labeled-response.c"],"programRoutines":[{"name":"labeled_response_mtag_is_ok()"}],"repo":"https://github.com/unrealircd/unrealircd","vendor":"UnrealIRCd","versions":[{"lessThan":"6.2.7.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"cve@mitre.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 \"label\" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority."}],"id":"CVE-2026-114713","lastModified":"2026-11-13T05:17:52.333","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"cve@mitre.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-114713","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-12T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-11-08T03:16:33.410","references":[{"source":"cve@mitre.org","url":"https://forums.unrealircd.org/viewtopic.php?t=9487"},{"source":"cve@mitre.org","url":"https://www.unrealircd.org/"},{"source":"cve@mitre.org","url":"https://www.unrealircd.org/index/news"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/11/08/1"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-140"}],"source":"cve@mitre.org","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["labeled-response"],"product":"UnrealIRCd","programFiles":["src/modules/labeled-response.c"],"programRoutines":[{"name":"labeled_response_mtag_is_ok()"}],"repo":"https://github.com/unrealircd/unrealircd","vendor":"UnrealIRCd","versions":[{"lessThan":"6.2.7.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"cve@mitre.org"}],"cisaActionDue":"2026-11-16","cisaExploitAdd":"2026-11-13","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"UnrealIRCd Improper Neutralization of Delimiters Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 \"label\" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority."}],"id":"CVE-2026-114713","lastModified":"2026-11-13T20:17:50.767","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"cve@mitre.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-114713","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:16:29.356444Z","version":"2.0.3"}}]},"published":"2026-11-08T03:16:33.410","references":[{"source":"cve@mitre.org","url":"https://forums.unrealircd.org/viewtopic.php?t=9487"},{"source":"cve@mitre.org","url":"https://www.unrealircd.org/"},{"source":"cve@mitre.org","url":"https://www.unrealircd.org/index/news"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/11/08/1"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-114713"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-140"}],"source":"cve@mitre.org","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-116059.json b/data/2026/CVE-2026-116059.json
index 2905cb91ff..3ea67bd86b 100644
--- a/data/2026/CVE-2026-116059.json
+++ b/data/2026/CVE-2026-116059.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"LetsRecover","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.2.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The LetsRecover  WordPress plugin through 1.2.0 does not sanitize a user-supplied value that is used as a database column name in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to append SQL to the query and read arbitrary data from the database, which is then returned through a second unauthenticated action."}],"id":"CVE-2026-116059","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:52.700","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/4a15043f-99f3-4ba5-aecf-c9eec77220a3/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"LetsRecover","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.2.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The LetsRecover  WordPress plugin through 1.2.0 does not sanitize a user-supplied value that is used as a database column name in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to append SQL to the query and read arbitrary data from the database, which is then returned through a second unauthenticated action."}],"id":"CVE-2026-116059","lastModified":"2026-11-13T19:18:32.717","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-116059","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:51:14.218024Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:52.700","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/4a15043f-99f3-4ba5-aecf-c9eec77220a3/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-116615.json b/data/2026/CVE-2026-116615.json
index a62cbf15e5..493cc9918f 100644
--- a/data/2026/CVE-2026-116615.json
+++ b/data/2026/CVE-2026-116615.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets","vendor":"marketingfire","versions":[{"lessThanOrEqual":"4.2.6.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 4.2.6.1 via the `post_content` parameter. This is due to asymmetric parsing between the save-time strip filter (`widgetopts_strip_logic_from_blocks()`) and the render-time parser (`blockopts_filter_before_display()`): embedding an inner `<!--start_widgetopts` literal inside a JSON key causes the write-side `json_decode` to see a non-`class` key and skip stripping — persisting the payload verbatim to the database — while the render-side `str_replace` reconstitutes the key to `class`, feeding the attacker-controlled `logic` value directly into `@eval`. This makes it possible for authenticated attackers, with Author-level access and above, to inject PHP expressions that execute on every front-end page view, enabling boolean-oracle exfiltration of WordPress site configuration data — including admin email address, default role, and arbitrary `get_option`, `get_user_meta`, and `get_post_meta` values — via the plugin's allowlisted-function sandbox, which escalates to unrestricted code execution if any installed plugin extends the `widgetopts_allowed_php_functions` filter. Contributors can also exploit this vulnerability when their submitted post is later published by an administrator; notably, the injected payload executes for all site visitors, including unauthenticated users, because a trust-flag mechanism introduced in version 4.2.6 causes `widgetopts_safe_eval_trusted()` to bypass its non-admin short-circuit at every legacy render callsite. Exploitation by attackers with contributor-level access and above requires that an administrator (or editor) later publishes the contributor's submission. On a default installation, where that is not configured, the vulnerability requires attackers with author-level access and above."}],"id":"CVE-2026-116615","lastModified":"2026-11-13T10:17:26.113","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security@wordfence.com","type":"Primary"}]},"published":"2026-11-13T10:17:25.983","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/widget-options/tags/4.2.6.1/includes/extras.php#L792"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/widget-options/tags/4.2.6.1/includes/widgets/gutenberg/gutenberg-toolbar.php#L331"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/widget-options/tags/4.2.6.1/includes/widgets/gutenberg/gutenberg-toolbar.php#L377"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/widget-options/tags/4.2.6.1/includes/widgets/gutenberg/gutenberg-toolbar.php#L496"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/widget-options/tags/4.2.7/includes/widgets/gutenberg/gutenberg-toolbar.php"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f5e4431-2789-47c8-81ce-e9f67454accc?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"security@wordfence.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets","vendor":"marketingfire","versions":[{"lessThanOrEqual":"4.2.6.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 4.2.6.1 via the `post_content` parameter. This is due to asymmetric parsing between the save-time strip filter (`widgetopts_strip_logic_from_blocks()`) and the render-time parser (`blockopts_filter_before_display()`): embedding an inner `<!--start_widgetopts` literal inside a JSON key causes the write-side `json_decode` to see a non-`class` key and skip stripping — persisting the payload verbatim to the database — while the render-side `str_replace` reconstitutes the key to `class`, feeding the attacker-controlled `logic` value directly into `@eval`. This makes it possible for authenticated attackers, with Author-level access and above, to inject PHP expressions that execute on every front-end page view, enabling boolean-oracle exfiltration of WordPress site configuration data — including admin email address, default role, and arbitrary `get_option`, `get_user_meta`, and `get_post_meta` values — via the plugin's allowlisted-function sandbox, which escalates to unrestricted code execution if any installed plugin extends the `widgetopts_allowed_php_functions` filter. Contributors can also exploit this vulnerability when their submitted post is later published by an administrator; notably, the injected payload executes for all site visitors, including unauthenticated users, because a trust-flag mechanism introduced in version 4.2.6 causes `widgetopts_safe_eval_trusted()` to bypass its non-admin short-circuit at every legacy render callsite. Exploitation by attackers with contributor-level access and above requires that an administrator (or editor) later publishes the contributor's submission. On a default installation, where that is not configured, the vulnerability requires attackers with author-level access and above."}],"id":"CVE-2026-116615","lastModified":"2026-11-13T20:17:51.890","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security@wordfence.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-116615","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:28:28.486973Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:25.983","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/widget-options/tags/4.2.6.1/includes/extras.php#L792"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/widget-options/tags/4.2.6.1/includes/widgets/gutenberg/gutenberg-toolbar.php#L331"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/widget-options/tags/4.2.6.1/includes/widgets/gutenberg/gutenberg-toolbar.php#L377"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/widget-options/tags/4.2.6.1/includes/widgets/gutenberg/gutenberg-toolbar.php#L496"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/widget-options/tags/4.2.7/includes/widgets/gutenberg/gutenberg-toolbar.php"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3f5e4431-2789-47c8-81ce-e9f67454accc?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"security@wordfence.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-118063.json b/data/2026/CVE-2026-118063.json
index ec211dcfa4..91358b16b2 100644
--- a/data/2026/CVE-2026-118063.json
+++ b/data/2026/CVE-2026-118063.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Advance Guest Post","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.9","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Advance Guest Post WordPress plugin through 1.9 does not properly validate uploaded files, relying on a case-sensitive and incomplete extension check that unauthenticated users can trivially bypass, allowing them to upload arbitrary files, including executable PHP variants, into a web-reachable directory, which can lead to remote code execution depending on the server configuration."}],"id":"CVE-2026-118063","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:52.807","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/45ea832a-9ed9-4f75-bc84-1b09794d362a/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Advance Guest Post","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.9","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Advance Guest Post WordPress plugin through 1.9 does not properly validate uploaded files, relying on a case-sensitive and incomplete extension check that unauthenticated users can trivially bypass, allowing them to upload arbitrary files, including executable PHP variants, into a web-reachable directory, which can lead to remote code execution depending on the server configuration."}],"id":"CVE-2026-118063","lastModified":"2026-11-13T19:18:35.953","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-118063","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:44:14.178860Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:52.807","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/45ea832a-9ed9-4f75-bc84-1b09794d362a/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-434"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-118064.json b/data/2026/CVE-2026-118064.json
index 835e76da68..7a1b97b931 100644
--- a/data/2026/CVE-2026-118064.json
+++ b/data/2026/CVE-2026-118064.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Advance Guest Post","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.9","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Advance Guest Post WordPress plugin through 1.9 does not properly restrict or validate file uploads, authorizing an upload action with a nonce exposed to every front-end visitor and checking only a file's leading bytes, allowing unauthenticated users to upload arbitrary PHP files and execute code remotely.\n\nSuccessful exploitation additionally requires the target to run PHP 7.x; on PHP 8.0 and later the vulnerable code path raises a fatal error before the file is written."}],"id":"CVE-2026-118064","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:52.897","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/897a812b-b84b-4422-9f3b-20402a0a8af5/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Advance Guest Post","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.9","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Advance Guest Post WordPress plugin through 1.9 does not properly restrict or validate file uploads, authorizing an upload action with a nonce exposed to every front-end visitor and checking only a file's leading bytes, allowing unauthenticated users to upload arbitrary PHP files and execute code remotely.\n\nSuccessful exploitation additionally requires the target to run PHP 7.x; on PHP 8.0 and later the vulnerable code path raises a fatal error before the file is written."}],"id":"CVE-2026-118064","lastModified":"2026-11-13T19:18:36.110","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-118064","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:44:03.488401Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:52.897","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/897a812b-b84b-4422-9f3b-20402a0a8af5/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-434"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-118065.json b/data/2026/CVE-2026-118065.json
index f88390b158..34e91ca41e 100644
--- a/data/2026/CVE-2026-118065.json
+++ b/data/2026/CVE-2026-118065.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Advance Guest Post","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.9","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Advance Guest Post WordPress plugin through 1.9 does not perform any authorization or ownership check when deleting media attachments, relying only on a nonce exposed to every site visitor, allowing unauthenticated users to permanently delete arbitrary Media Library attachments and their files."}],"id":"CVE-2026-118065","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:52.997","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/77771b0e-a3e7-4dd6-b5b4-c179c6db1deb/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Advance Guest Post","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.9","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Advance Guest Post WordPress plugin through 1.9 does not perform any authorization or ownership check when deleting media attachments, relying only on a nonce exposed to every site visitor, allowing unauthenticated users to permanently delete arbitrary Media Library attachments and their files."}],"id":"CVE-2026-118065","lastModified":"2026-11-13T19:18:36.277","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-118065","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:51:03.375158Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:52.997","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/77771b0e-a3e7-4dd6-b5b4-c179c6db1deb/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-118191.json b/data/2026/CVE-2026-118191.json
index dd7f55d363..1826248f09 100644
--- a/data/2026/CVE-2026-118191.json
+++ b/data/2026/CVE-2026-118191.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery","vendor":"smub","versions":[{"lessThanOrEqual":"4.5.5","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handle_job function in all versions up to, and including, 4.5.5 This makes it possible for authenticated attackers, with custom-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The 'NextGEN Manage gallery' capability required to reach the vulnerable endpoint is granted to Administrators by default but can be delegated to lower-privileged roles via the plugin's Roles screen."}],"id":"CVE-2026-118191","lastModified":"2026-11-13T10:17:26.280","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"security@wordfence.com","type":"Primary"}]},"published":"2026-11-13T10:17:26.150","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/nextgen-gallery/tags/4.5.3/src/Lightroom/Controller.php#L164"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/nextgen-gallery/tags/4.5.3/src/Lightroom/Controller.php#L2395"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/nextgen-gallery/tags/4.5.3/src/Lightroom/Controller.php#L2764"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/nextgen-gallery/tags/4.5.3/src/Lightroom/Controller.php#L2943"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/changeset/3793263/nextgen-gallery/trunk/src/Lightroom/Controller.php"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/changeset/3793263/nextgen-gallery/trunk/src/Lightroom/Controller.php?old=3773860&old_path=nextgen-gallery%2Ftrunk%2Fsrc%2FLightroom%2FController.php"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4e01402-f866-43b9-9fef-7e9b156a9e0d?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"security@wordfence.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery","vendor":"smub","versions":[{"lessThanOrEqual":"4.5.5","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handle_job function in all versions up to, and including, 4.5.5 This makes it possible for authenticated attackers, with custom-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The 'NextGEN Manage gallery' capability required to reach the vulnerable endpoint is granted to Administrators by default but can be delegated to lower-privileged roles via the plugin's Roles screen."}],"id":"CVE-2026-118191","lastModified":"2026-11-13T20:17:52.917","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"security@wordfence.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-118191","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:42:14.462646Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:26.150","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/nextgen-gallery/tags/4.5.3/src/Lightroom/Controller.php#L164"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/nextgen-gallery/tags/4.5.3/src/Lightroom/Controller.php#L2395"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/nextgen-gallery/tags/4.5.3/src/Lightroom/Controller.php#L2764"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/nextgen-gallery/tags/4.5.3/src/Lightroom/Controller.php#L2943"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/changeset/3793263/nextgen-gallery/trunk/src/Lightroom/Controller.php"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/changeset/3793263/nextgen-gallery/trunk/src/Lightroom/Controller.php?old=3773860&old_path=nextgen-gallery%2Ftrunk%2Fsrc%2FLightroom%2FController.php"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b4e01402-f866-43b9-9fef-7e9b156a9e0d?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"security@wordfence.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-118741.json b/data/2026/CVE-2026-118741.json
index 33d56f51e6..5bad6070af 100644
--- a/data/2026/CVE-2026-118741.json
+++ b/data/2026/CVE-2026-118741.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Microsoft.dotnet-scaffold","vendor":"Microsoft","versions":[{"lessThan":"20.3.0","status":"affected","version":"10.0.0","versionType":"custom"}]},{"product":"Microsoft.dotnet-scaffold-aspnet","vendor":"Microsoft","versions":[{"lessThan":"20.3.0","status":"affected","version":"9.0.0","versionType":"custom"}]},{"platforms":[".NET 10.0"],"product":"Microsoft.DotNet.Web.ProjectTemplates.10.0","vendor":"Microsoft","versions":[{"lessThan":"10.0.15","status":"affected","version":"10.0.13","versionType":"custom"}]},{"platforms":[".NET 8.0"],"product":"Microsoft.DotNet.Web.ProjectTemplates.8.0","vendor":"Microsoft","versions":[{"lessThan":"8.0.34","status":"affected","version":"8.0.32","versionType":"custom"}]},{"platforms":[".NET 9.0"],"product":"Microsoft.DotNet.Web.ProjectTemplates.9.0","vendor":"Microsoft","versions":[{"lessThan":"9.0.23","status":"affected","version":"9.0.21","versionType":"custom"}]},{"platforms":[".NET 10.0",".NET 8.0",".NET 9.0"],"product":"Microsoft.VisualStudio.Web.CodeGeneration.Design","vendor":"Microsoft","versions":[{"lessThan":"9.0.13","status":"affected","version":"NOT_YET_AVAILABLE","versionType":"custom"}]},{"platforms":[".NET 10.0",".NET 8.0",".NET 9.0"],"product":"Microsoft.VisualStudio.Web.CodeGenerators.Mvc","vendor":"Microsoft","versions":[{"lessThan":"9.0.13","status":"affected","version":"NOT_YET_AVAILABLE","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network."}],"id":"CVE-2026-118741","lastModified":"2026-11-11T12:19:10.227","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-118741","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:29:01.565434Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:50.893","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118741"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-640"}],"source":"secure@microsoft.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Microsoft.dotnet-scaffold version 10.0","vendor":"Microsoft","versions":[{"lessThan":"20.3.0","status":"affected","version":"10.0.0","versionType":"custom"}]},{"product":"Microsoft.dotnet-scaffold version 20.x","vendor":"Microsoft","versions":[{"lessThan":"20.3.0","status":"affected","version":"20.0.0-preview.1.26156.3","versionType":"custom"}]},{"product":"Microsoft.dotnet-scaffold-aspnet version 10.0.0-rc.1.25458.5","vendor":"Microsoft","versions":[{"lessThan":"20.3.0","status":"affected","version":"10.0.0-rc.1.25458.5","versionType":"custom"}]},{"product":"Microsoft.dotnet-scaffold-aspnet version 10.0.0-rc.1.25468.1","vendor":"Microsoft","versions":[{"lessThan":"20.3.0","status":"affected","version":"10.0.0-rc.1.25468.1","versionType":"custom"}]},{"product":"Microsoft.dotnet-scaffold-aspnet version 9.0","vendor":"Microsoft","versions":[{"lessThan":"20.3.0","status":"affected","version":"9.0.0","versionType":"custom"}]},{"product":"Microsoft.dotnet-scaffold-aspnet version 9.0.0-preview.8.24467.5","vendor":"Microsoft","versions":[{"lessThan":"20.3.0","status":"affected","version":"9.0.0-preview.8.24467.5","versionType":"custom"}]},{"product":"Microsoft.dotnet-scaffold-aspnet version 9.0.0-preview.9.24509.5","vendor":"Microsoft","versions":[{"lessThan":"20.3.0","status":"affected","version":"9.0.0-preview.9.24509.5","versionType":"custom"}]},{"platforms":[".NET 10.0"],"product":"Microsoft.DotNet.Web.ProjectTemplates.10.0","vendor":"Microsoft","versions":[{"lessThan":"10.0.15","status":"affected","version":"10.0.13","versionType":"custom"}]},{"platforms":[".NET 8.0"],"product":"Microsoft.DotNet.Web.ProjectTemplates.8.0","vendor":"Microsoft","versions":[{"lessThan":"8.0.34","status":"affected","version":"8.0.32","versionType":"custom"}]},{"platforms":[".NET 9.0"],"product":"Microsoft.DotNet.Web.ProjectTemplates.9.0","vendor":"Microsoft","versions":[{"lessThan":"9.0.23","status":"affected","version":"9.0.21","versionType":"custom"}]},{"platforms":[".NET 10.0",".NET 8.0",".NET 9.0"],"product":"Microsoft.VisualStudio.Web.CodeGeneration.Design","vendor":"Microsoft","versions":[{"lessThan":"9.0.13","status":"affected","version":"NOT_YET_AVAILABLE","versionType":"custom"}]},{"product":"Microsoft.VisualStudio.Web.CodeGeneration.Design version 10.0","vendor":"Microsoft","versions":[{"lessThan":"10.0.3","status":"affected","version":"10.0.0-rc.1.25458.5","versionType":"custom"}]},{"product":"Microsoft.VisualStudio.Web.CodeGeneration.Design version 11.0.0-preview.1.26156.3","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"11.0.0-preview.1.26156.3","versionType":"custom"}]},{"product":"Microsoft.VisualStudio.Web.CodeGeneration.Design version 11.0.0-preview.1.26230.3","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"11.0.0-preview.1.26230.3","versionType":"custom"}]},{"product":"Microsoft.VisualStudio.Web.CodeGeneration.Design version 8.0","vendor":"Microsoft","versions":[{"lessThan":"8.0.24","status":"affected","version":"8.0.0-preview.1.23117.2","versionType":"custom"}]},{"product":"Microsoft.VisualStudio.Web.CodeGeneration.Design version 9.0","vendor":"Microsoft","versions":[{"lessThan":"9.0.13","status":"affected","version":"9.0.0-preview.1.24112.3","versionType":"custom"}]},{"platforms":[".NET 10.0",".NET 8.0",".NET 9.0"],"product":"Microsoft.VisualStudio.Web.CodeGenerators.Mvc","vendor":"Microsoft","versions":[{"lessThan":"9.0.13","status":"affected","version":"NOT_YET_AVAILABLE","versionType":"custom"}]},{"product":"Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 10.0","vendor":"Microsoft","versions":[{"lessThan":"10.0.3","status":"affected","version":"10.0.0-rc.1.25458.5","versionType":"custom"}]},{"product":"Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 11.0.0-preview.1.26156.3","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"11.0.0-preview.1.26156.3","versionType":"custom"}]},{"product":"Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 11.0.0-preview.1.26230.3","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"11.0.0-preview.1.26230.3","versionType":"custom"}]},{"product":"Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 8.0","vendor":"Microsoft","versions":[{"lessThan":"8.0.24","status":"affected","version":"8.0.0-preview.1.23117.2","versionType":"custom"}]},{"product":"Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 9.0","vendor":"Microsoft","versions":[{"lessThan":"9.0.13","status":"affected","version":"9.0.0-preview.1.24112.3","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network."}],"id":"CVE-2026-118741","lastModified":"2026-11-13T19:18:45.563","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-118741","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:29:01.565434Z","version":"2.0.3"}}]},"published":"2026-11-10T19:19:50.893","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118741"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-640"}],"source":"secure@microsoft.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-119618.json b/data/2026/CVE-2026-119618.json
index 013ba4c5c9..2ca7c40898 100644
--- a/data/2026/CVE-2026-119618.json
+++ b/data/2026/CVE-2026-119618.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Apache HTTP Server","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"2.4.70","status":"affected","version":"2.4.55","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE.\n\nThis issue affects Apache HTTP Server: from 2.4.55 through 2.4.70.\nAffected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42."}],"id":"CVE-2026-119618","lastModified":"2026-11-13T15:17:32.773","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-119618","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T14:17:15.903768Z","version":"2.0.3"}}]},"published":"2026-11-11T15:17:15.900","references":[{"source":"security@apache.org","url":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/11/11/13"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/security/cve/cve-2026-119618"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://bugs.gentoo.org/986161"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://github.com/AlmaLinux/updates/issues/4252"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://github.com/microsoft/azurelinux/pull/20165"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://ubuntu.com/security/CVE-2026-119618"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.wiz.io/blog/cve-2026-119618-rce-apache-http-server-vulnerability"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"security@apache.org","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Apache HTTP Server","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"2.4.70","status":"affected","version":"2.4.55","versionType":"semver"}]}],"source":"security@apache.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","matchCriteriaId":"EA2A33DB-23BB-4A27-9579-7EB1A977580C","versionEndExcluding":"2.4.71","versionStartIncluding":"2.4.55","vulnerable":true},{"criteria":"cpe:2.3:a:icing:mod_http2:*:*:*:*:*:apache_httpd:*:*","matchCriteriaId":"C1F96999-0729-4CBE-80D1-F7AC6A24301E","versionEndExcluding":"2.0.42","versionStartIncluding":"2.0.8","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE.\n\nThis issue affects Apache HTTP Server: from 2.4.55 through 2.4.70.\nAffected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42."}],"id":"CVE-2026-119618","lastModified":"2026-11-13T18:44:55.113","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-119618","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T14:17:15.903768Z","version":"2.0.3"}}]},"published":"2026-11-11T15:17:15.900","references":[{"source":"security@apache.org","tags":["Patch","Vendor Advisory"],"url":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"http://www.openwall.com/lists/oss-security/2026/11/11/13"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/security/cve/cve-2026-119618"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugs.gentoo.org/986161"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"url":"https://github.com/AlmaLinux/updates/issues/4252"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://github.com/microsoft/azurelinux/pull/20165"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://ubuntu.com/security/CVE-2026-119618"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory"],"url":"https://www.wiz.io/blog/cve-2026-119618-rce-apache-http-server-vulnerability"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"security@apache.org","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-119856.json b/data/2026/CVE-2026-119856.json
index 1fbdb6ae26..f9b2f31adc 100644
--- a/data/2026/CVE-2026-119856.json
+++ b/data/2026/CVE-2026-119856.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally."}],"id":"CVE-2026-119856","lastModified":"2026-11-10T20:18:34.797","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-119856","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:14:59.222204Z","version":"2.0.3"}}]},"published":"2026-11-10T19:20:03.443","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119856"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-497"}],"source":"secure@microsoft.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Microsoft Office 365 for Mac","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Microsoft Office for Android","vendor":"Microsoft","versions":[{"lessThan":"16.0.20625.20014","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2021","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2024","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally."}],"id":"CVE-2026-119856","lastModified":"2026-11-13T19:18:51.410","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-119856","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:14:59.222204Z","version":"2.0.3"}}]},"published":"2026-11-10T19:20:03.443","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119856"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-497"}],"source":"secure@microsoft.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120145.json b/data/2026/CVE-2026-120145.json
index c5050753b7..55235bc2bb 100644
--- a/data/2026/CVE-2026-120145.json
+++ b/data/2026/CVE-2026-120145.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PostgreSQL","vendor":"n/a","versions":[{"lessThan":"18.7","status":"affected","version":"18","versionType":"rpm"},{"lessThan":"17.12","status":"affected","version":"17","versionType":"rpm"},{"lessThan":"16.16","status":"affected","version":"16","versionType":"rpm"},{"lessThan":"15.20","status":"affected","version":"15","versionType":"rpm"},{"lessThan":"14.25","status":"affected","version":"0","versionType":"rpm"}]}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Missing authorization in PostgreSQL logical replication allows a compromised publisher to execute arbitrary code as the operating system user running the superuser-owned subscription, via naming a system catalog as a replication target.  Only subscriptions owned by a superuser are vulnerable.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}],"id":"CVE-2026-120145","lastModified":"2026-11-12T19:02:35.830","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]},"published":"2026-11-12T15:17:43.060","references":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","url":"https://www.postgresql.org/support/security/CVE-2026-120145/"}],"sourceIdentifier":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PostgreSQL","vendor":"n/a","versions":[{"lessThan":"18.7","status":"affected","version":"18","versionType":"rpm"},{"lessThan":"17.12","status":"affected","version":"17","versionType":"rpm"},{"lessThan":"16.16","status":"affected","version":"16","versionType":"rpm"},{"lessThan":"15.20","status":"affected","version":"15","versionType":"rpm"},{"lessThan":"14.25","status":"affected","version":"0","versionType":"rpm"}]}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Missing authorization in PostgreSQL logical replication allows a compromised publisher to execute arbitrary code as the operating system user running the superuser-owned subscription, via naming a system catalog as a replication target.  Only subscriptions owned by a superuser are vulnerable.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}],"id":"CVE-2026-120145","lastModified":"2026-11-13T20:17:53.947","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120145","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:27:09.508002Z","version":"2.0.3"}}]},"published":"2026-11-12T15:17:43.060","references":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","url":"https://www.postgresql.org/support/security/CVE-2026-120145/"}],"sourceIdentifier":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120147.json b/data/2026/CVE-2026-120147.json
index cc6e156658..f1b50a9bb7 100644
--- a/data/2026/CVE-2026-120147.json
+++ b/data/2026/CVE-2026-120147.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PostgreSQL","vendor":"n/a","versions":[{"lessThan":"18.7","status":"affected","version":"18","versionType":"rpm"},{"lessThan":"17.12","status":"affected","version":"17","versionType":"rpm"},{"lessThan":"16.16","status":"affected","version":"16","versionType":"rpm"},{"lessThan":"15.20","status":"affected","version":"15","versionType":"rpm"},{"lessThan":"14.25","status":"affected","version":"0","versionType":"rpm"}]}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in the PostgreSQL dblink extension allows an object creator to execute arbitrary code as the operating system user running the database, via type conversion code that re-enters dblink and closes a connection whose results an outer dblink call is reading.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}],"id":"CVE-2026-120147","lastModified":"2026-11-12T19:02:35.830","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]},"published":"2026-11-12T15:17:43.317","references":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","url":"https://www.postgresql.org/support/security/CVE-2026-120147/"}],"sourceIdentifier":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PostgreSQL","vendor":"n/a","versions":[{"lessThan":"18.7","status":"affected","version":"18","versionType":"rpm"},{"lessThan":"17.12","status":"affected","version":"17","versionType":"rpm"},{"lessThan":"16.16","status":"affected","version":"16","versionType":"rpm"},{"lessThan":"15.20","status":"affected","version":"15","versionType":"rpm"},{"lessThan":"14.25","status":"affected","version":"0","versionType":"rpm"}]}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in the PostgreSQL dblink extension allows an object creator to execute arbitrary code as the operating system user running the database, via type conversion code that re-enters dblink and closes a connection whose results an outer dblink call is reading.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}],"id":"CVE-2026-120147","lastModified":"2026-11-13T20:17:54.957","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120147","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:23:55.989324Z","version":"2.0.3"}}]},"published":"2026-11-12T15:17:43.317","references":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","url":"https://www.postgresql.org/support/security/CVE-2026-120147/"}],"sourceIdentifier":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120148.json b/data/2026/CVE-2026-120148.json
index d2964fac6b..67a8156f2d 100644
--- a/data/2026/CVE-2026-120148.json
+++ b/data/2026/CVE-2026-120148.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PostgreSQL","vendor":"n/a","versions":[{"lessThan":"18.7","status":"affected","version":"18","versionType":"rpm"},{"lessThan":"17.12","status":"affected","version":"17","versionType":"rpm"},{"lessThan":"16.16","status":"affected","version":"16","versionType":"rpm"},{"lessThan":"15.20","status":"affected","version":"15","versionType":"rpm"},{"lessThan":"14.25","status":"affected","version":"0","versionType":"rpm"}]}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Type confusion in PostgreSQL extended statistics allows an object creator to execute arbitrary code as the operating system user running the database, via a statistics expression of an anonymous RECORD type whose backend-local type identifier denotes a different row type in another session.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}],"id":"CVE-2026-120148","lastModified":"2026-11-12T19:02:35.830","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]},"published":"2026-11-12T15:17:43.443","references":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","url":"https://www.postgresql.org/support/security/CVE-2026-120148/"}],"sourceIdentifier":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-843"}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PostgreSQL","vendor":"n/a","versions":[{"lessThan":"18.7","status":"affected","version":"18","versionType":"rpm"},{"lessThan":"17.12","status":"affected","version":"17","versionType":"rpm"},{"lessThan":"16.16","status":"affected","version":"16","versionType":"rpm"},{"lessThan":"15.20","status":"affected","version":"15","versionType":"rpm"},{"lessThan":"14.25","status":"affected","version":"0","versionType":"rpm"}]}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Type confusion in PostgreSQL extended statistics allows an object creator to execute arbitrary code as the operating system user running the database, via a statistics expression of an anonymous RECORD type whose backend-local type identifier denotes a different row type in another session.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}],"id":"CVE-2026-120148","lastModified":"2026-11-13T20:17:55.963","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120148","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:25:24.552400Z","version":"2.0.3"}}]},"published":"2026-11-12T15:17:43.443","references":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","url":"https://www.postgresql.org/support/security/CVE-2026-120148/"}],"sourceIdentifier":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-843"}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120149.json b/data/2026/CVE-2026-120149.json
index d7328b06b3..c9ee3bf9a4 100644
--- a/data/2026/CVE-2026-120149.json
+++ b/data/2026/CVE-2026-120149.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PostgreSQL","vendor":"n/a","versions":[{"lessThan":"18.7","status":"affected","version":"18","versionType":"rpm"},{"lessThan":"17.12","status":"affected","version":"17","versionType":"rpm"},{"lessThan":"16.16","status":"affected","version":"16","versionType":"rpm"},{"lessThan":"15.20","status":"affected","version":"15","versionType":"rpm"},{"lessThan":"14.25","status":"affected","version":"0","versionType":"rpm"}]}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in PostgreSQL foreign batch inserts allows a foreign server to execute arbitrary code, via reporting that it inserted more rows than the server supplied.  postgres_fdw can legitimately encounter this when a rule on the remote table expands an INSERT into additional rows.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}],"id":"CVE-2026-120149","lastModified":"2026-11-12T19:02:35.830","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]},"published":"2026-11-12T15:17:43.567","references":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","url":"https://www.postgresql.org/support/security/CVE-2026-120149/"}],"sourceIdentifier":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PostgreSQL","vendor":"n/a","versions":[{"lessThan":"18.7","status":"affected","version":"18","versionType":"rpm"},{"lessThan":"17.12","status":"affected","version":"17","versionType":"rpm"},{"lessThan":"16.16","status":"affected","version":"16","versionType":"rpm"},{"lessThan":"15.20","status":"affected","version":"15","versionType":"rpm"},{"lessThan":"14.25","status":"affected","version":"0","versionType":"rpm"}]}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in PostgreSQL foreign batch inserts allows a foreign server to execute arbitrary code, via reporting that it inserted more rows than the server supplied.  postgres_fdw can legitimately encounter this when a rule on the remote table expands an INSERT into additional rows.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}],"id":"CVE-2026-120149","lastModified":"2026-11-13T20:17:56.990","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120149","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:26:15.530714Z","version":"2.0.3"}}]},"published":"2026-11-12T15:17:43.567","references":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","url":"https://www.postgresql.org/support/security/CVE-2026-120149/"}],"sourceIdentifier":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120150.json b/data/2026/CVE-2026-120150.json
index b43d7efde3..1e92f458b9 100644
--- a/data/2026/CVE-2026-120150.json
+++ b/data/2026/CVE-2026-120150.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PostgreSQL","vendor":"n/a","versions":[{"lessThan":"18.7","status":"affected","version":"18","versionType":"rpm"},{"lessThan":"17.12","status":"affected","version":"17","versionType":"rpm"},{"lessThan":"16.16","status":"affected","version":"16","versionType":"rpm"},{"lessThan":"15.20","status":"affected","version":"15","versionType":"rpm"},{"lessThan":"14.25","status":"affected","version":"0","versionType":"rpm"}]}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in PostgreSQL expanded-record domain checks allows an object creator to execute arbitrary code as the operating system user running the database, via repeated checks of a domain over a composite type that cause reuse of a dangling memory-context pointer.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}],"id":"CVE-2026-120150","lastModified":"2026-11-12T19:02:35.830","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]},"published":"2026-11-12T15:17:43.687","references":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","url":"https://www.postgresql.org/support/security/CVE-2026-120150/"}],"sourceIdentifier":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PostgreSQL","vendor":"n/a","versions":[{"lessThan":"18.7","status":"affected","version":"18","versionType":"rpm"},{"lessThan":"17.12","status":"affected","version":"17","versionType":"rpm"},{"lessThan":"16.16","status":"affected","version":"16","versionType":"rpm"},{"lessThan":"15.20","status":"affected","version":"15","versionType":"rpm"},{"lessThan":"14.25","status":"affected","version":"0","versionType":"rpm"}]}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use after free in PostgreSQL expanded-record domain checks allows an object creator to execute arbitrary code as the operating system user running the database, via repeated checks of a domain over a composite type that cause reuse of a dangling memory-context pointer.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."}],"id":"CVE-2026-120150","lastModified":"2026-11-13T20:17:58.000","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120150","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:23:26.284264Z","version":"2.0.3"}}]},"published":"2026-11-12T15:17:43.687","references":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","url":"https://www.postgresql.org/support/security/CVE-2026-120150/"}],"sourceIdentifier":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120407.json b/data/2026/CVE-2026-120407.json
index fd2cbf88cd..c2af5dee99 100644
--- a/data/2026/CVE-2026-120407.json
+++ b/data/2026/CVE-2026-120407.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Contact Form 7","vendor":"Unknown","versions":[{"lessThan":"6.2.5","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Contact Form 7 WordPress plugin before 6.2.5 does not restrict which user properties a form field's default value can be populated from, allowing users with the Editor role and above to obtain the password hash and sensitive user meta (such as two-factor secrets) of higher-privileged users, including administrators, who view and submit the form."}],"id":"CVE-2026-120407","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:53.093","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/a981358b-6736-4d46-9352-b57a11dbcb54/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Contact Form 7","vendor":"Unknown","versions":[{"lessThan":"6.2.5","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Contact Form 7 WordPress plugin before 6.2.5 does not restrict which user properties a form field's default value can be populated from, allowing users with the Editor role and above to obtain the password hash and sensitive user meta (such as two-factor secrets) of higher-privileged users, including administrators, who view and submit the form."}],"id":"CVE-2026-120407","lastModified":"2026-11-13T19:19:03.143","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":0.9,"impactScore":3.6,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120407","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:50:53.094889Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:53.093","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/a981358b-6736-4d46-9352-b57a11dbcb54/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120573.json b/data/2026/CVE-2026-120573.json
index 02f6070a15..b49583e1a9 100644
--- a/data/2026/CVE-2026-120573.json
+++ b/data/2026/CVE-2026-120573.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WPeMatico RSS Feed Fetcher","vendor":"etruel","versions":[{"lessThanOrEqual":"2.9.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_category' parameter in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is persisted in post meta as campaign_data, bypassing wp_kses sanitization, and executes in the browser session of any user with edit_posts — including Administrators — who opens the WPeMatico campaigns list screen."}],"id":"CVE-2026-120573","lastModified":"2026-11-13T10:17:26.947","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":2.7,"source":"security@wordfence.com","type":"Primary"}]},"published":"2026-11-13T10:17:26.817","references":[{"source":"security@wordfence.com","url":"https://github.com/etruel/wpematico/tree/2.9.2"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9.1/includes/campaign_edit.php#L540"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9.1/includes/campaigns_list.php#L820"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9.1/includes/wpematico_functions.php#L1106"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d93d4360-b66c-499a-838c-e8eea36bd364?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@wordfence.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WPeMatico RSS Feed Fetcher","vendor":"etruel","versions":[{"lessThanOrEqual":"2.9.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_category' parameter in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is persisted in post meta as campaign_data, bypassing wp_kses sanitization, and executes in the browser session of any user with edit_posts — including Administrators — who opens the WPeMatico campaigns list screen."}],"id":"CVE-2026-120573","lastModified":"2026-11-13T20:17:59.093","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":2.7,"source":"security@wordfence.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120573","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:29:19.052645Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:26.817","references":[{"source":"security@wordfence.com","url":"https://github.com/etruel/wpematico/tree/2.9.2"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9.1/includes/campaign_edit.php#L540"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9.1/includes/campaigns_list.php#L820"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9.1/includes/wpematico_functions.php#L1106"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d93d4360-b66c-499a-838c-e8eea36bd364?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@wordfence.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120803.json b/data/2026/CVE-2026-120803.json
index 2d284d979f..87b2a65a33 100644
--- a/data/2026/CVE-2026-120803.json
+++ b/data/2026/CVE-2026-120803.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator used by certain $setWindowFields aggregation pipelines. Under specific conditions, the accumulator can retain a dangling pointer to memory that has since been freed. When this stale pointer is later dereferenced during serialization of the carried-forward value, it can result in a heap out-of-bounds read that may expose adjacent heap contents and crash the mongod server. An authenticated user with readWrite privileges on a database can trigger this issue by crafting a specific aggregation pipeline."}],"id":"CVE-2026-120803","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T20:18:50.420","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135180"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator used by certain $setWindowFields aggregation pipelines. Under specific conditions, the accumulator can retain a dangling pointer to memory that has since been freed. When this stale pointer is later dereferenced during serialization of the carried-forward value, it can result in a heap out-of-bounds read that may expose adjacent heap contents and crash the mongod server. An authenticated user with readWrite privileges on a database can trigger this issue by crafting a specific aggregation pipeline."}],"id":"CVE-2026-120803","lastModified":"2026-11-13T20:18:00.110","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120803","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:47:51.198952Z","version":"2.0.3"}}]},"published":"2026-11-10T20:18:50.420","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135180"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120805.json b/data/2026/CVE-2026-120805.json
index 3ca6349823..1c2325e42a 100644
--- a/data/2026/CVE-2026-120805.json
+++ b/data/2026/CVE-2026-120805.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In MongoDB Server, an authenticated user with insert privileges on a collection could craft a command with specially constructed encryption-related parameters to redirect internal Queryable Encryption metadata writes to metadata belonging to other encrypted collections within the same database. The server’s authorization layer validated only the user-facing target collection namespace, while subsequent internal writes derived from client-supplied parameters were performed with elevated internal privileges, bypassing the original caller’s permission scope. This could allow unauthorized writes into another collection’s Queryable Encryption metadata, potentially corrupting encrypted index state and compaction operations."}],"id":"CVE-2026-120805","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T20:18:50.740","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-130498"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In MongoDB Server, an authenticated user with insert privileges on a collection could craft a command with specially constructed encryption-related parameters to redirect internal Queryable Encryption metadata writes to metadata belonging to other encrypted collections within the same database. The server’s authorization layer validated only the user-facing target collection namespace, while subsequent internal writes derived from client-supplied parameters were performed with elevated internal privileges, bypassing the original caller’s permission scope. This could allow unauthorized writes into another collection’s Queryable Encryption metadata, potentially corrupting encrypted index state and compaction operations."}],"id":"CVE-2026-120805","lastModified":"2026-11-13T19:19:05.097","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120805","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:52:32.530764Z","version":"2.0.3"}}]},"published":"2026-11-10T20:18:50.740","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-130498"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120808.json b/data/2026/CVE-2026-120808.json
index ce8c0492ce..f00b3df6bf 100644
--- a/data/2026/CVE-2026-120808.json
+++ b/data/2026/CVE-2026-120808.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue exists in MongoDB's macOS TLS client implementation where certificate chain-of-trust validation is bypassed for outbound connections to IPv6-addressed peers. When a MongoDB process using the Apple SecureTransport TLS backend connects to an IPv6 target, the trust evaluation result from SecTrustEvaluate is silently discarded, regardless of whether the peer's certificate is trusted. An on-path party could exploit this by presenting a self-signed certificate containing the target's IPv6 address in the Subject Alternative Name to intercept and modify encrypted inter-node or external service traffic. This issue only affects MongoDB processes running on macOS with the Apple SecureTransport TLS provider."}],"id":"CVE-2026-120808","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T20:18:51.180","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-130681"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-295"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue exists in MongoDB's macOS TLS client implementation where certificate chain-of-trust validation is bypassed for outbound connections to IPv6-addressed peers. When a MongoDB process using the Apple SecureTransport TLS backend connects to an IPv6 target, the trust evaluation result from SecTrustEvaluate is silently discarded, regardless of whether the peer's certificate is trusted. An on-path party could exploit this by presenting a self-signed certificate containing the target's IPv6 address in the Subject Alternative Name to intercept and modify encrypted inter-node or external service traffic. This issue only affects MongoDB processes running on macOS with the Apple SecureTransport TLS provider."}],"id":"CVE-2026-120808","lastModified":"2026-11-13T20:18:01.137","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120808","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T20:11:36.901764Z","version":"2.0.3"}}]},"published":"2026-11-10T20:18:51.180","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-130681"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-295"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120809.json b/data/2026/CVE-2026-120809.json
index ddcbd14a8b..2edbb5bfc2 100644
--- a/data/2026/CVE-2026-120809.json
+++ b/data/2026/CVE-2026-120809.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free read issue exists in MongoDB’s SBE (Slot-Based Execution) engine when processing aggregation pipelines with $unwind on time-series collections. An internal error in state-preservation logic can cause a value still referenced by downstream stages to have its underlying memory freed prematurely. An authenticated user can craft an aggregation pipeline under specific conditions to trigger this condition, potentially reading recycled server heap memory in query results or crashing the server. This issue is only triggerable when a non-default server parameter related to the SBE engine is enabled."}],"id":"CVE-2026-120809","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T20:18:51.323","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-132279"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free read issue exists in MongoDB’s SBE (Slot-Based Execution) engine when processing aggregation pipelines with $unwind on time-series collections. An internal error in state-preservation logic can cause a value still referenced by downstream stages to have its underlying memory freed prematurely. An authenticated user can craft an aggregation pipeline under specific conditions to trigger this condition, potentially reading recycled server heap memory in query results or crashing the server. This issue is only triggerable when a non-default server parameter related to the SBE engine is enabled."}],"id":"CVE-2026-120809","lastModified":"2026-11-13T20:18:02.173","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120809","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:42:36.006778Z","version":"2.0.3"}}]},"published":"2026-11-10T20:18:51.323","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-132279"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120810.json b/data/2026/CVE-2026-120810.json
index f73041d16a..6f714f3905 100644
--- a/data/2026/CVE-2026-120810.json
+++ b/data/2026/CVE-2026-120810.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue in MongoDB server’s aggregation framework allows an authenticated user with read privileges to cause a denial of service by sending specially crafted aggregate commands using an internal expression. Despite its internal naming, this expression is registered as accessible to any authenticated client. By supplying crafted input parameters across multiple concurrent connections, each evaluation triggers unbounded memory allocations with no per-expression memory limits enforced. This can exhaust available server memory and cause the mongod process to be terminated by the operating system’s out-of-memory killer."}],"id":"CVE-2026-120810","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T20:18:51.473","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-132430"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue in MongoDB server’s aggregation framework allows an authenticated user with read privileges to cause a denial of service by sending specially crafted aggregate commands using an internal expression. Despite its internal naming, this expression is registered as accessible to any authenticated client. By supplying crafted input parameters across multiple concurrent connections, each evaluation triggers unbounded memory allocations with no per-expression memory limits enforced. This can exhaust available server memory and cause the mongod process to be terminated by the operating system’s out-of-memory killer."}],"id":"CVE-2026-120810","lastModified":"2026-11-13T20:18:03.210","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120810","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T20:07:52.930649Z","version":"2.0.3"}}]},"published":"2026-11-10T20:18:51.473","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-132430"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120811.json b/data/2026/CVE-2026-120811.json
index 68f9d11187..335ae517af 100644
--- a/data/2026/CVE-2026-120811.json
+++ b/data/2026/CVE-2026-120811.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free issue exists in the MongoDB server’s classic query engine plan cache. Under certain query conditions, an unowned reference to data from an earlier command can be retained in cached plan statistics. After the originating memory is freed, a subsequent diagnostic command serializing those statistics can read freed heap memory, potentially returning sensitive server process memory contents to the authenticated client. Under certain heap reuse conditions, this may also cause the server to crash."}],"id":"CVE-2026-120811","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":1.6,"impactScore":4.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T20:18:51.613","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135353"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free issue exists in the MongoDB server’s classic query engine plan cache. Under certain query conditions, an unowned reference to data from an earlier command can be retained in cached plan statistics. After the originating memory is freed, a subsequent diagnostic command serializing those statistics can read freed heap memory, potentially returning sensitive server process memory contents to the authenticated client. Under certain heap reuse conditions, this may also cause the server to crash."}],"id":"CVE-2026-120811","lastModified":"2026-11-13T20:18:04.253","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":1.6,"impactScore":4.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120811","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:44:09.937567Z","version":"2.0.3"}}]},"published":"2026-11-10T20:18:51.613","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135353"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120812.json b/data/2026/CVE-2026-120812.json
index 531d761eac..0b43a3d074 100644
--- a/data/2026/CVE-2026-120812.json
+++ b/data/2026/CVE-2026-120812.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue in MongoDB Server's query processing component allows an authenticated user with read privileges to cause a denial of service. Uncontrolled recursion in an internal query compilation component can lead to stack exhaustion and server process termination when processing certain queries against time-series collections."}],"id":"CVE-2026-120812","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T20:18:51.760","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-131961"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-674"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue in MongoDB Server's query processing component allows an authenticated user with read privileges to cause a denial of service. Uncontrolled recursion in an internal query compilation component can lead to stack exhaustion and server process termination when processing certain queries against time-series collections."}],"id":"CVE-2026-120812","lastModified":"2026-11-13T20:18:05.270","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120812","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T20:04:30.397709Z","version":"2.0.3"}}]},"published":"2026-11-10T20:18:51.760","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-131961"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-674"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120813.json b/data/2026/CVE-2026-120813.json
index 6f669f8df0..9321ff2318 100644
--- a/data/2026/CVE-2026-120813.json
+++ b/data/2026/CVE-2026-120813.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue in MongoDB Server's client-side field-level encryption (CSFLE) schema processing component allows encryption metadata to be silently dropped during schema parsing under certain conditions. A party who can deliver a specially crafted schema to a user's CSFLE client may cause sensitive data intended for encryption to be stored in plaintext, bypassing confidentiality protections. Exploitation requires the ability to deliver the malicious schema to the user's client, such as through a man-in-the-middle position or an untrusted server."}],"id":"CVE-2026-120813","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T20:18:51.900","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-132517"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-436"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue in MongoDB Server's client-side field-level encryption (CSFLE) schema processing component allows encryption metadata to be silently dropped during schema parsing under certain conditions. A party who can deliver a specially crafted schema to a user's CSFLE client may cause sensitive data intended for encryption to be stored in plaintext, bypassing confidentiality protections. Exploitation requires the ability to deliver the malicious schema to the user's client, such as through a man-in-the-middle position or an untrusted server."}],"id":"CVE-2026-120813","lastModified":"2026-11-13T20:18:06.290","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120813","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T20:06:26.991075Z","version":"2.0.3"}}]},"published":"2026-11-10T20:18:51.900","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-132517"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-436"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120816.json b/data/2026/CVE-2026-120816.json
index 7eed2618da..7033b2ecd4 100644
--- a/data/2026/CVE-2026-120816.json
+++ b/data/2026/CVE-2026-120816.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A user with basic read-tier database privileges can use an option on a server-side data-change notification feature to receive the contents of certain restricted internal collections that the same user is refused on a direct read. The privilege check for the notification feature is derived only from the target namespace and does not account for the option, so no additional permission is required. This may result in unintended access to data stored in those internal collections."}],"id":"CVE-2026-120816","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T21:18:59.973","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135203"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A user with basic read-tier database privileges can use an option on a server-side data-change notification feature to receive the contents of certain restricted internal collections that the same user is refused on a direct read. The privilege check for the notification feature is derived only from the target namespace and does not account for the option, so no additional permission is required. This may result in unintended access to data stored in those internal collections."}],"id":"CVE-2026-120816","lastModified":"2026-11-13T19:19:06.163","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120816","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:58:11.780535Z","version":"2.0.3"}}]},"published":"2026-11-10T21:18:59.973","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135203"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120817.json b/data/2026/CVE-2026-120817.json
index 37daa6039a..a8bc2e5da6 100644
--- a/data/2026/CVE-2026-120817.json
+++ b/data/2026/CVE-2026-120817.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked against a collection validator that uses geospatial query operators. The condition can be caused by an authenticated user with write privileges, and may result in the server terminating unexpectedly."}],"id":"CVE-2026-120817","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T21:19:00.130","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135655"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked against a collection validator that uses geospatial query operators. The condition can be caused by an authenticated user with write privileges, and may result in the server terminating unexpectedly."}],"id":"CVE-2026-120817","lastModified":"2026-11-13T20:18:07.337","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120817","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T20:03:11.622809Z","version":"2.0.3"}}]},"published":"2026-11-10T21:19:00.130","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135655"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120818.json b/data/2026/CVE-2026-120818.json
index 1f676b1376..cad9b8b556 100644
--- a/data/2026/CVE-2026-120818.json
+++ b/data/2026/CVE-2026-120818.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free weakness in MongoDB Server's server-side JavaScript support for aggregation may allow a stale reference to previously freed process memory to be read and returned. An authenticated user with minimal or no assigned roles can trigger this condition over the normal network protocol by submitting a single crafted aggregation request, with no additional privileges or non-default configuration. Successful triggering this issue may result in adjacent process memory contents being returned, including data that undermines memory-layout randomization, and may in some cases affect server availability."}],"id":"CVE-2026-120818","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T21:19:00.283","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135727"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free weakness in MongoDB Server's server-side JavaScript support for aggregation may allow a stale reference to previously freed process memory to be read and returned. An authenticated user with minimal or no assigned roles can trigger this condition over the normal network protocol by submitting a single crafted aggregation request, with no additional privileges or non-default configuration. Successful triggering this issue may result in adjacent process memory contents being returned, including data that undermines memory-layout randomization, and may in some cases affect server availability."}],"id":"CVE-2026-120818","lastModified":"2026-11-13T19:19:07.127","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120818","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:00:00.812296Z","version":"2.0.3"}}]},"published":"2026-11-10T21:19:00.283","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135727"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120820.json b/data/2026/CVE-2026-120820.json
index 8330625fe0..dd9d7b4fa5 100644
--- a/data/2026/CVE-2026-120820.json
+++ b/data/2026/CVE-2026-120820.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"MongoDB Server maintains an in-memory table of per-namespace statistics for operations that carry encrypted-field information. Entries are created for any namespace supplied in a request, with no limit on the number of entries and no way to remove entries that never corresponded to a real collection. A user with basic read privileges who repeatedly issues ordinary read commands referencing arbitrary namespace names may cause the server process to retain steadily increasing amounts of memory and to slow down on the affected code path; the memory is reclaimed only by restarting the process."}],"id":"CVE-2026-120820","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T21:19:00.643","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135737"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"MongoDB Server maintains an in-memory table of per-namespace statistics for operations that carry encrypted-field information. Entries are created for any namespace supplied in a request, with no limit on the number of entries and no way to remove entries that never corresponded to a real collection. A user with basic read privileges who repeatedly issues ordinary read commands referencing arbitrary namespace names may cause the server process to retain steadily increasing amounts of memory and to slow down on the affected code path; the memory is reclaimed only by restarting the process."}],"id":"CVE-2026-120820","lastModified":"2026-11-13T19:19:08.100","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120820","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:49:45.590846Z","version":"2.0.3"}}]},"published":"2026-11-10T21:19:00.643","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-135737"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120821.json b/data/2026/CVE-2026-120821.json
index 85ef3a2b8b..2282280cd1 100644
--- a/data/2026/CVE-2026-120821.json
+++ b/data/2026/CVE-2026-120821.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free in the aggregation framework of MongoDB Server can occur when certain expressions are evaluated in an aggregation sub-pipeline. The condition can be caused by an authenticated user with read privileges, and may result in the server terminating unexpectedly."}],"id":"CVE-2026-120821","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T21:19:01.090","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-136285"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free in the aggregation framework of MongoDB Server can occur when certain expressions are evaluated in an aggregation sub-pipeline. The condition can be caused by an authenticated user with read privileges, and may result in the server terminating unexpectedly."}],"id":"CVE-2026-120821","lastModified":"2026-11-13T20:18:08.363","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120821","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:52:05.867529Z","version":"2.0.3"}}]},"published":"2026-11-10T21:19:01.090","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-136285"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120822.json b/data/2026/CVE-2026-120822.json
index fe3fb90acc..a9d8dda281 100644
--- a/data/2026/CVE-2026-120822.json
+++ b/data/2026/CVE-2026-120822.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"MongoDB Server may omit an authorization check on the resource that a replication-related administrative command actually targets, because that check is conditioned on a value taken from the client's own request. A user holding backup and restore privileges may therefore read and relocate collections outside the set that user is permitted to access. This may result in unintended access to data and unintended changes to the collection catalog."}],"id":"CVE-2026-120822","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.5,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T21:19:01.573","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-136182"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"MongoDB Server may omit an authorization check on the resource that a replication-related administrative command actually targets, because that check is conditioned on a value taken from the client's own request. A user holding backup and restore privileges may therefore read and relocate collections outside the set that user is permitted to access. This may result in unintended access to data and unintended changes to the collection catalog."}],"id":"CVE-2026-120822","lastModified":"2026-11-13T19:19:09.070","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.5,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120822","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:47:16.193032Z","version":"2.0.3"}}]},"published":"2026-11-10T21:19:01.573","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-136182"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://jira.mongodb.org/browse/SERVER-136182"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120824.json b/data/2026/CVE-2026-120824.json
index 8a8a474ed7..28d0b429fb 100644
--- a/data/2026/CVE-2026-120824.json
+++ b/data/2026/CVE-2026-120824.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free in the time-series collection component of MongoDB Server can occur when the server validates a time-series bucket document during a write. The condition can be caused by an authenticated user with privileges to write bucket documents directly, and may result in the server terminating unexpectedly or, under certain conditions, arbitrary code execution in the context of the server process."}],"id":"CVE-2026-120824","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T21:19:02.143","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-136505"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free in the time-series collection component of MongoDB Server can occur when the server validates a time-series bucket document during a write. The condition can be caused by an authenticated user with privileges to write bucket documents directly, and may result in the server terminating unexpectedly or, under certain conditions, arbitrary code execution in the context of the server process."}],"id":"CVE-2026-120824","lastModified":"2026-11-13T20:18:09.410","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120824","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:49:54.574130Z","version":"2.0.3"}}]},"published":"2026-11-10T21:19:02.143","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-136505"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-120828.json b/data/2026/CVE-2026-120828.json
index 6401d4f8d3..bb3ce2272e 100644
--- a/data/2026/CVE-2026-120828.json
+++ b/data/2026/CVE-2026-120828.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThan":"6.0.30","status":"affected","version":"6.0.0","versionType":"semver"},{"lessThan":"5.0.35","status":"affected","version":"5.0.0","versionType":"semver"},{"lessThan":"4.4.32","status":"affected","version":"4.4.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A replica-set database server node does not limit or reclaim internal wait records created while handling a client-supplied read option that names a point in time the node will never reach. A party with network access and no credentials can cause these records to accumulate without bound and persist after the requests end, which may make the server run out of memory and become unavailable."}],"id":"CVE-2026-120828","lastModified":"2026-11-10T22:08:59.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-10T21:19:02.700","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-138119"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MongoDB Server","vendor":"MongoDB","versions":[{"lessThan":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.3.16","status":"affected","version":"8.3.0","versionType":"semver"},{"lessThan":"8.0.37","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThan":"7.0.48","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThan":"6.0.30","status":"affected","version":"6.0.0","versionType":"semver"},{"lessThan":"5.0.35","status":"affected","version":"5.0.0","versionType":"semver"},{"lessThan":"4.4.32","status":"affected","version":"4.4.0","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A replica-set database server node does not limit or reclaim internal wait records created while handling a client-supplied read option that names a point in time the node will never reach. A party with network access and no credentials can cause these records to accumulate without bound and persist after the requests end, which may make the server run out of memory and become unavailable."}],"id":"CVE-2026-120828","lastModified":"2026-11-13T20:18:10.413","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-120828","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:54:59.943351Z","version":"2.0.3"}}]},"published":"2026-11-10T21:19:02.700","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/SERVER-138119"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-121528.json b/data/2026/CVE-2026-121528.json
index 13fb8e4981..5a17cb83af 100644
--- a/data/2026/CVE-2026-121528.json
+++ b/data/2026/CVE-2026-121528.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"cpes":["cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"FortiOS","vendor":"Fortinet","versions":[{"lessThanOrEqual":"7.6.4","status":"affected","version":"7.6.0","versionType":"semver"},{"lessThanOrEqual":"7.4.9","status":"affected","version":"7.4.0","versionType":"semver"},{"lessThanOrEqual":"7.2.13","status":"affected","version":"7.2.0","versionType":"semver"},{"lessThanOrEqual":"7.0.19","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThanOrEqual":"6.4.16","status":"affected","version":"6.4.0","versionType":"semver"}]}],"source":"psirt@fortinet.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.13 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the SSLVPN web portal and the backend destination website."}],"id":"CVE-2026-121528","lastModified":"2026-11-12T19:14:29.340","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"psirt@fortinet.com","type":"Secondary"}]},"published":"2026-11-11T22:17:11.250","references":[{"source":"psirt@fortinet.com","url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-193"}],"sourceIdentifier":"psirt@fortinet.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-295"}],"source":"psirt@fortinet.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"cpes":["cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"FortiOS","vendor":"Fortinet","versions":[{"lessThanOrEqual":"7.6.4","status":"affected","version":"7.6.0","versionType":"semver"},{"lessThanOrEqual":"7.4.9","status":"affected","version":"7.4.0","versionType":"semver"},{"lessThanOrEqual":"7.2.13","status":"affected","version":"7.2.0","versionType":"semver"},{"lessThanOrEqual":"7.0.19","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThanOrEqual":"6.4.16","status":"affected","version":"6.4.0","versionType":"semver"}]}],"source":"psirt@fortinet.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.13, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the SSLVPN web portal and the backend destination website."}],"id":"CVE-2026-121528","lastModified":"2026-11-13T19:19:10.053","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"psirt@fortinet.com","type":"Secondary"}]},"published":"2026-11-11T22:17:11.250","references":[{"source":"psirt@fortinet.com","url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-193"}],"sourceIdentifier":"psirt@fortinet.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-295"}],"source":"psirt@fortinet.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-121680.json b/data/2026/CVE-2026-121680.json
index a0da47057b..ee8f127115 100644
--- a/data/2026/CVE-2026-121680.json
+++ b/data/2026/CVE-2026-121680.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network."}],"id":"CVE-2026-121680","lastModified":"2026-11-11T15:17:16.960","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-121680","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T15:05:54.177742Z","version":"2.0.3"}}]},"published":"2026-11-10T19:20:31.833","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121680"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-522"}],"source":"secure@microsoft.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Microsoft Office for Android","vendor":"Microsoft","versions":[{"lessThan":"16.0.20625.20014","status":"affected","version":"16.0.1","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network."}],"id":"CVE-2026-121680","lastModified":"2026-11-13T19:19:11.570","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-121680","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T15:05:54.177742Z","version":"2.0.3"}}]},"published":"2026-11-10T19:20:31.833","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121680"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-522"}],"source":"secure@microsoft.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-121809.json b/data/2026/CVE-2026-121809.json
index c796710fe9..d35b5b4e74 100644
--- a/data/2026/CVE-2026-121809.json
+++ b/data/2026/CVE-2026-121809.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"collectionURL":"https://repo.hex.pm","cpes":["cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"grpc_server","packageURL":"pkg:hex/grpc_server","product":"grpc_server","programFiles":["lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"1.1.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"elixir-grpc/grpc","packageURL":"pkg:github/elixir-grpc/grpc","product":"grpc_server","programFiles":["grpc_server/lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"38955f1392cbf08eef231a347348445410455c85","status":"affected","version":"0332faae5f5e132314794dbfdae5edecbccea292","versionType":"git"}]},{"collectionURL":"https://repo.hex.pm","cpes":["cpe:2.3:a:elixir-grpc:grpc:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"grpc","packageURL":"pkg:hex/grpc","product":"grpc","programFiles":["lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"1.0.0","status":"affected","version":"0.3.1","versionType":"semver"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:elixir-grpc:grpc:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"elixir-grpc/grpc","packageURL":"pkg:github/elixir-grpc/grpc","product":"grpc","programFiles":["lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"0332faae5f5e132314794dbfdae5edecbccea292","status":"affected","version":"6d8a09ad919e208fb600538ac8b19bd733a04310","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in elixir-grpc grpc_server and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request whose body ends inside a gRPC message.\n\nGRPC.Server.Adapters.Cowboy.read_stream/1 (grpc_server/lib/grpc/server/adapters/cowboy.ex, and the Cowboy adapter in grpc before the package split) asks for more data whenever the buffer does not hold a complete message. Once the request body has ended, every further read returns an empty chunk, so the buffer never changes and the function retries without end. A single 5-byte length prefix sent with END_STREAM keeps one scheduler busy for as long as the connection stays open, and repeated requests exhaust all schedulers.\n\nThis issue affects grpc_server: from 1.0.0 before 1.1.0; grpc: from 0.3.1 before 1.0.0."}],"id":"CVE-2026-121809","lastModified":"2026-11-13T17:17:19.310","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]},"published":"2026-11-13T17:17:19.310","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2026-121809.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/commit/0332faae5f5e132314794dbfdae5edecbccea292"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/commit/38955f1392cbf08eef231a347348445410455c85"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/commit/6d8a09ad919e208fb600538ac8b19bd733a04310"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/security/advisories/GHSA-c2h9-f9cc-27xh"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2026-121809"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-835"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"collectionURL":"https://repo.hex.pm","cpes":["cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"grpc_server","packageURL":"pkg:hex/grpc_server","product":"grpc_server","programFiles":["lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"1.1.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"elixir-grpc/grpc","packageURL":"pkg:github/elixir-grpc/grpc","product":"grpc_server","programFiles":["grpc_server/lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"38955f1392cbf08eef231a347348445410455c85","status":"affected","version":"0332faae5f5e132314794dbfdae5edecbccea292","versionType":"git"}]},{"collectionURL":"https://repo.hex.pm","cpes":["cpe:2.3:a:elixir-grpc:grpc:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"grpc","packageURL":"pkg:hex/grpc","product":"grpc","programFiles":["lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"1.0.0","status":"affected","version":"0.3.1","versionType":"semver"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:elixir-grpc:grpc:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"elixir-grpc/grpc","packageURL":"pkg:github/elixir-grpc/grpc","product":"grpc","programFiles":["lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':read_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"0332faae5f5e132314794dbfdae5edecbccea292","status":"affected","version":"6d8a09ad919e208fb600538ac8b19bd733a04310","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in elixir-grpc grpc_server and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request whose body ends inside a gRPC message.\n\nGRPC.Server.Adapters.Cowboy.read_stream/1 (grpc_server/lib/grpc/server/adapters/cowboy.ex, and the Cowboy adapter in grpc before the package split) asks for more data whenever the buffer does not hold a complete message. Once the request body has ended, every further read returns an empty chunk, so the buffer never changes and the function retries without end. A single 5-byte length prefix sent with END_STREAM keeps one scheduler busy for as long as the connection stays open, and repeated requests exhaust all schedulers.\n\nThis issue affects grpc_server: from 1.0.0 before 1.1.0; grpc: from 0.3.1 before 1.0.0."}],"id":"CVE-2026-121809","lastModified":"2026-11-13T20:18:11.570","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-121809","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T17:55:12.226355Z","version":"2.0.3"}}]},"published":"2026-11-13T17:17:19.310","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2026-121809.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/commit/0332faae5f5e132314794dbfdae5edecbccea292"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/commit/38955f1392cbf08eef231a347348445410455c85"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/commit/6d8a09ad919e208fb600538ac8b19bd733a04310"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/security/advisories/GHSA-c2h9-f9cc-27xh"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2026-121809"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-835"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-121853.json b/data/2026/CVE-2026-121853.json
index 00175a2290..affa191a2d 100644
--- a/data/2026/CVE-2026-121853.json
+++ b/data/2026/CVE-2026-121853.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"AppPresser","vendor":"Unknown","versions":[{"lessThan":"5.0.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The AppPresser  WordPress plugin before 5.0.0 does not restrict access to two of its REST API endpoints, allowing unauthenticated visitors to retrieve the installed versions of AppPresser, its add-ons, several third-party AppPresser  WordPress plugin before 5.0.0 and its ."}],"id":"CVE-2026-121853","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:53.183","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/674849e9-44ad-496f-baba-6d17d58b5807/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"AppPresser","vendor":"Unknown","versions":[{"lessThan":"5.0.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The AppPresser  WordPress plugin before 5.0.0 does not restrict access to two of its REST API endpoints, allowing unauthenticated visitors to retrieve the installed versions of AppPresser, its add-ons, several third-party AppPresser  WordPress plugin before 5.0.0 and its ."}],"id":"CVE-2026-121853","lastModified":"2026-11-13T19:19:12.250","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-121853","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:50:45.453230Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:53.183","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/674849e9-44ad-496f-baba-6d17d58b5807/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-122227.json b/data/2026/CVE-2026-122227.json
index 0754ab6667..1a1dfaf876 100644
--- a/data/2026/CVE-2026-122227.json
+++ b/data/2026/CVE-2026-122227.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Easy Property Listings","vendor":"mervb1","versions":[{"lessThanOrEqual":"3.5.28","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Easy Property Listings plugin for WordPress is vulnerable to generic SQL Injection via the 'post_type' parameter in all versions up to, and including, 3.5.28 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The sanitize_text_field() function is applied to the attribute value but does not escape single quotes, providing no mitigation against breaking out of the SQL IN('...') literal."}],"id":"CVE-2026-122227","lastModified":"2026-11-13T10:17:27.790","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"security@wordfence.com","type":"Primary"}]},"published":"2026-11-13T10:17:27.660","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/includes/functions.php#L1851"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/includes/functions.php#L1859"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/includes/functions.php#L2349"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/shortcodes/shortcode-listing-search.php#L30"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/templates/content/shortcodes/listing-search/default.php#L119"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/widgets/widget-functions.php#L390"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.29"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb0389e2-ab65-4652-a3e9-521dfd2e54a8?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"security@wordfence.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Easy Property Listings","vendor":"mervb1","versions":[{"lessThanOrEqual":"3.5.28","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Easy Property Listings plugin for WordPress is vulnerable to generic SQL Injection via the 'post_type' parameter in all versions up to, and including, 3.5.28 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The sanitize_text_field() function is applied to the attribute value but does not escape single quotes, providing no mitigation against breaking out of the SQL IN('...') literal."}],"id":"CVE-2026-122227","lastModified":"2026-11-13T20:18:13.030","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"security@wordfence.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-122227","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:29:38.506765Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:27.660","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/includes/functions.php#L1851"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/includes/functions.php#L1859"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/includes/functions.php#L2349"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/shortcodes/shortcode-listing-search.php#L30"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/templates/content/shortcodes/listing-search/default.php#L119"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.28/lib/widgets/widget-functions.php#L390"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.29"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb0389e2-ab65-4652-a3e9-521dfd2e54a8?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"security@wordfence.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123039.json b/data/2026/CVE-2026-123039.json
index cd0ed43e9d..affdf85293 100644
--- a/data/2026/CVE-2026-123039.json
+++ b/data/2026/CVE-2026-123039.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"Quantum Security Gateway","vendor":"checkpoint","versions":[{"status":"affected","version":"R82.10 with Jumbo Hotfix Take 50 or below"},{"status":"affected","version":"R82.20 with Jumbo Hotfix Take 10 or below"},{"status":"affected","version":"R82 with Jumbo Hotfix Take 130 or below"},{"status":"affected","version":"R81.20 with Jumbo Hotfix Take 173 or below"}]},{"product":"Quantum Security Management","vendor":"checkpoint","versions":[{"status":"affected","version":"R82.10 with Jumbo Hotfix Take 50 or below"},{"status":"affected","version":"R82.20 with Jumbo Hotfix Take 10 or below"},{"status":"affected","version":"R82 with Jumbo Hotfix Take 130 or below"},{"status":"affected","version":"R81.20 with Jumbo Hotfix Take 173 or below"}]}],"source":"cve@checkpoint.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root."}],"id":"CVE-2026-123039","lastModified":"2026-11-13T17:17:19.920","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"cve@checkpoint.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123039","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T11:43:47.126754Z","version":"2.0.3"}}]},"published":"2026-11-12T14:17:24.233","references":[{"source":"cve@checkpoint.com","url":"https://support.checkpoint.com/results/sk/sk1000362"}],"sourceIdentifier":"cve@checkpoint.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-732"},{"lang":"en","value":"CWE-862"}],"source":"cve@checkpoint.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Quantum Security Gateway","vendor":"checkpoint","versions":[{"status":"affected","version":"R82.10 with Jumbo Hotfix Take 50 or below"},{"status":"affected","version":"R82.20 with Jumbo Hotfix Take 10 or below"},{"status":"affected","version":"R82 with Jumbo Hotfix Take 130 or below"},{"status":"affected","version":"R81.20 with Jumbo Hotfix Take 173 or below"}]},{"product":"Quantum Security Management","vendor":"checkpoint","versions":[{"status":"affected","version":"R82.10 with Jumbo Hotfix Take 50 or below"},{"status":"affected","version":"R82.20 with Jumbo Hotfix Take 10 or below"},{"status":"affected","version":"R82 with Jumbo Hotfix Take 130 or below"},{"status":"affected","version":"R81.20 with Jumbo Hotfix Take 173 or below"}]}],"source":"cve@checkpoint.com"}],"cisaActionDue":"2026-11-16","cisaExploitAdd":"2026-11-13","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root."}],"id":"CVE-2026-123039","lastModified":"2026-11-13T20:18:14.257","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"cve@checkpoint.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123039","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:16:35.345993Z","version":"2.0.3"}}]},"published":"2026-11-12T14:17:24.233","references":[{"source":"cve@checkpoint.com","url":"https://support.checkpoint.com/results/sk/sk1000362"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-123039"}],"sourceIdentifier":"cve@checkpoint.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-732"},{"lang":"en","value":"CWE-862"}],"source":"cve@checkpoint.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123093.json b/data/2026/CVE-2026-123093.json
index 3e602bd5c0..dcbcd166e8 100644
--- a/data/2026/CVE-2026-123093.json
+++ b/data/2026/CVE-2026-123093.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WP Remote Users Sync","vendor":"Unknown","versions":[{"lessThan":"2.2.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WP Remote Users Sync WordPress plugin before 2.2.1 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete the WP Remote Users Sync WordPress plugin before 2.2.1's entire activity log."}],"id":"CVE-2026-123093","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:53.293","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/d5082119-feab-4978-b975-fd86a91b68a0/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WP Remote Users Sync","vendor":"Unknown","versions":[{"lessThan":"2.2.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WP Remote Users Sync WordPress plugin before 2.2.1 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete the WP Remote Users Sync WordPress plugin before 2.2.1's entire activity log."}],"id":"CVE-2026-123093","lastModified":"2026-11-13T19:19:18.300","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123093","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:50:33.378013Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:53.293","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/d5082119-feab-4978-b975-fd86a91b68a0/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123097.json b/data/2026/CVE-2026-123097.json
index ade77565eb..d758cb5522 100644
--- a/data/2026/CVE-2026-123097.json
+++ b/data/2026/CVE-2026-123097.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WP Remote Users Sync","vendor":"Unknown","versions":[{"lessThan":"2.2.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WP Remote Users Sync WordPress plugin before 2.2.1 does not restrict which account fields a synchronised site may set when it creates or updates users, allowing a site holding the shared synchronisation keys to assign the administrator role, modify any existing account and write arbitrary user metadata, bypassing the receiving site's role and metadata restrictions."}],"id":"CVE-2026-123097","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:53.387","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/9df17b10-261c-4d93-a24d-76b10b65456f/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WP Remote Users Sync","vendor":"Unknown","versions":[{"lessThan":"2.2.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WP Remote Users Sync WordPress plugin before 2.2.1 does not restrict which account fields a synchronised site may set when it creates or updates users, allowing a site holding the shared synchronisation keys to assign the administrator role, modify any existing account and write arbitrary user metadata, bypassing the receiving site's role and metadata restrictions."}],"id":"CVE-2026-123097","lastModified":"2026-11-13T19:19:18.473","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123097","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:50:24.696584Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:53.387","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/9df17b10-261c-4d93-a24d-76b10b65456f/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123124.json b/data/2026/CVE-2026-123124.json
index c75bb3091e..b9fbfef88d 100644
--- a/data/2026/CVE-2026-123124.json
+++ b/data/2026/CVE-2026-123124.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"WooCommerce Vindi Pagamento","vendor":"Unknown","versions":[{"lessThanOrEqual":"0.8.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WooCommerce Vindi Pagamento WordPress plugin through 0.8.3 does not perform any authorisation check when updating an order's shipment tracking code, and does not escape that code when displaying it on the order edit page, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks against administrators and shop managers who view an order paid through the gateway.\nThe stored payload is only rendered on sites using WooCommerce's legacy (WordPress posts) order storage."}],"id":"CVE-2026-123124","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:53.487","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/861d57fa-54dd-4980-8f0e-9d8a2874072f/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"WooCommerce Vindi Pagamento","vendor":"Unknown","versions":[{"lessThanOrEqual":"0.8.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WooCommerce Vindi Pagamento WordPress plugin through 0.8.3 does not perform any authorisation check when updating an order's shipment tracking code, and does not escape that code when displaying it on the order edit page, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks against administrators and shop managers who view an order paid through the gateway.\nThe stored payload is only rendered on sites using WooCommerce's legacy (WordPress posts) order storage."}],"id":"CVE-2026-123124","lastModified":"2026-11-13T19:19:18.620","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123124","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:49:51.938823Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:53.487","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/861d57fa-54dd-4980-8f0e-9d8a2874072f/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123177.json b/data/2026/CVE-2026-123177.json
index 376d4ceb80..a979d98b8f 100644
--- a/data/2026/CVE-2026-123177.json
+++ b/data/2026/CVE-2026-123177.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"dnf5","product":"Red Hat Hardened Images","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in dnf5daemon-server. Unauthenticated D-Bus methods pass caller-controlled URL or .rpm path patterns into a root-privileged cmdline package loader that may store fetched content in a world-readable cache without size limits, or open local paths as root, allowing a local attacker to disclose privileged content and to deny service via disk exhaustion."}],"id":"CVE-2026-123177","lastModified":"2026-11-13T18:17:30.897","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H","version":"3.1"},"exploitabilityScore":2.0,"impactScore":5.8,"source":"secalert@redhat.com","type":"Primary"}]},"published":"2026-11-13T18:17:30.780","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-123177"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567426"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"secalert@redhat.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"dnf5","product":"Red Hat Hardened Images","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in dnf5daemon-server. Unauthenticated D-Bus methods pass caller-controlled URL or .rpm path patterns into a root-privileged cmdline package loader that may store fetched content in a world-readable cache without size limits, or open local paths as root, allowing a local attacker to disclose privileged content and to deny service via disk exhaustion."}],"id":"CVE-2026-123177","lastModified":"2026-11-13T20:18:15.640","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H","version":"3.1"},"exploitabilityScore":2.0,"impactScore":5.8,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123177","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:49:22.064299Z","version":"2.0.3"}}]},"published":"2026-11-13T18:17:30.780","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-123177"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2567426"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"secalert@redhat.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123279.json b/data/2026/CVE-2026-123279.json
index 22de83746b..7d6211ba73 100644
--- a/data/2026/CVE-2026-123279.json
+++ b/data/2026/CVE-2026-123279.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators"}],"id":"CVE-2026-123279","lastModified":"2026-11-10T19:20:38.893","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.0,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.3,"impactScore":6.0,"source":"cve@jetbrains.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123279","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T17:51:29.920686Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.140","references":[{"source":"cve@jetbrains.com","url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"cve@jetbrains.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:jetbrains:datalore:*:*:*:*:*:*:*:*","matchCriteriaId":"25FE1AD4-12AD-45A4-9E01-CC7C0E2D7585","versionEndExcluding":"2026.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators"}],"id":"CVE-2026-123279","lastModified":"2026-11-13T18:53:00.740","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.0,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.3,"impactScore":6.0,"source":"cve@jetbrains.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123279","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T17:51:29.920686Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.140","references":[{"source":"cve@jetbrains.com","tags":["Vendor Advisory"],"url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"cve@jetbrains.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123280.json b/data/2026/CVE-2026-123280.json
index a2c3a34460..685a2e6231 100644
--- a/data/2026/CVE-2026-123280.json
+++ b/data/2026/CVE-2026-123280.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.2.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports"}],"id":"CVE-2026-123280","lastModified":"2026-11-10T19:20:39.060","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"cve@jetbrains.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123280","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T18:31:49.186782Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.270","references":[{"source":"cve@jetbrains.com","url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"cve@jetbrains.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.2.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:jetbrains:datalore:*:*:*:*:*:*:*:*","matchCriteriaId":"3C41E875-35C1-4DE3-9C61-59BFEE40AC63","versionEndExcluding":"2026.2.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports"}],"id":"CVE-2026-123280","lastModified":"2026-11-13T18:55:07.007","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"cve@jetbrains.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123280","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T18:31:49.186782Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.270","references":[{"source":"cve@jetbrains.com","tags":["Vendor Advisory"],"url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"cve@jetbrains.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123281.json b/data/2026/CVE-2026-123281.json
index e3cb0a336d..87cc4b3074 100644
--- a/data/2026/CVE-2026-123281.json
+++ b/data/2026/CVE-2026-123281.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker"}],"id":"CVE-2026-123281","lastModified":"2026-11-10T19:20:39.227","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"cve@jetbrains.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123281","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T18:33:19.467467Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.390","references":[{"source":"cve@jetbrains.com","url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-88"}],"source":"cve@jetbrains.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:jetbrains:datalore:*:*:*:*:*:*:*:*","matchCriteriaId":"25FE1AD4-12AD-45A4-9E01-CC7C0E2D7585","versionEndExcluding":"2026.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker"}],"id":"CVE-2026-123281","lastModified":"2026-11-13T18:56:40.050","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"cve@jetbrains.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123281","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T18:33:19.467467Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.390","references":[{"source":"cve@jetbrains.com","tags":["Vendor Advisory"],"url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-88"}],"source":"cve@jetbrains.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123282.json b/data/2026/CVE-2026-123282.json
index c45d6547f7..fd247d768f 100644
--- a/data/2026/CVE-2026-123282.json
+++ b/data/2026/CVE-2026-123282.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session"}],"id":"CVE-2026-123282","lastModified":"2026-11-10T19:20:39.400","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"cve@jetbrains.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123282","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T18:34:18.220911Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.520","references":[{"source":"cve@jetbrains.com","url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-672"}],"source":"cve@jetbrains.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:jetbrains:datalore:*:*:*:*:*:*:*:*","matchCriteriaId":"25FE1AD4-12AD-45A4-9E01-CC7C0E2D7585","versionEndExcluding":"2026.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session"}],"id":"CVE-2026-123282","lastModified":"2026-11-13T18:58:12.513","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"cve@jetbrains.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123282","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T18:34:18.220911Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.520","references":[{"source":"cve@jetbrains.com","tags":["Vendor Advisory"],"url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-672"}],"source":"cve@jetbrains.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123283.json b/data/2026/CVE-2026-123283.json
index 06e058818f..c1b53d9bb6 100644
--- a/data/2026/CVE-2026-123283.json
+++ b/data/2026/CVE-2026-123283.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered account"}],"id":"CVE-2026-123283","lastModified":"2026-11-10T19:20:39.587","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.2,"source":"cve@jetbrains.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123283","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T18:36:27.678757Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.650","references":[{"source":"cve@jetbrains.com","url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Undergoing Analysis"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:jetbrains:datalore:*:*:*:*:*:*:*:*","matchCriteriaId":"25FE1AD4-12AD-45A4-9E01-CC7C0E2D7585","versionEndExcluding":"2026.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered account"}],"id":"CVE-2026-123283","lastModified":"2026-11-13T18:58:38.127","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.2,"source":"cve@jetbrains.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123283","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T18:36:27.678757Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.650","references":[{"source":"cve@jetbrains.com","tags":["Vendor Advisory"],"url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-290"}],"source":"nvd@nist.gov","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-123284.json b/data/2026/CVE-2026-123284.json
index d611ebb159..7e7af2dc97 100644
--- a/data/2026/CVE-2026-123284.json
+++ b/data/2026/CVE-2026-123284.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared content"}],"id":"CVE-2026-123284","lastModified":"2026-11-10T19:20:39.760","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.2,"source":"cve@jetbrains.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123284","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T18:49:06.061359Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.773","references":[{"source":"cve@jetbrains.com","url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"cve@jetbrains.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Datalore","vendor":"JetBrains","versions":[{"lessThan":"2026.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"cve@jetbrains.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:jetbrains:datalore:*:*:*:*:*:*:*:*","matchCriteriaId":"25FE1AD4-12AD-45A4-9E01-CC7C0E2D7585","versionEndExcluding":"2026.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared content"}],"id":"CVE-2026-123284","lastModified":"2026-11-13T18:49:33.790","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.2,"source":"cve@jetbrains.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123284","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T18:49:06.061359Z","version":"2.0.3"}}]},"published":"2026-11-06T11:17:06.773","references":[{"source":"cve@jetbrains.com","tags":["Vendor Advisory"],"url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"sourceIdentifier":"cve@jetbrains.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"cve@jetbrains.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123670.json b/data/2026/CVE-2026-123670.json
index 05be98d3a8..fce5df30c8 100644
--- a/data/2026/CVE-2026-123670.json
+++ b/data/2026/CVE-2026-123670.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Essential Real Estate","vendor":"Unknown","versions":[{"lessThan":"5.3.6","status":"affected","version":"5.3.5","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Essential Real Estate WordPress plugin before 5.3.6 does not verify that the recipients it allows for its contact email action are legitimate, allowing users with the self-registered Customer role to add any address to that allowlist so that unauthenticated users can then send emails with attacker-controlled content to it through the site."}],"id":"CVE-2026-123670","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:53.587","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/04d772fe-001d-4f25-a11a-dedf16064ce4/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Essential Real Estate","vendor":"Unknown","versions":[{"lessThan":"5.3.6","status":"affected","version":"5.3.5","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Essential Real Estate WordPress plugin before 5.3.6 does not verify that the recipients it allows for its contact email action are legitimate, allowing users with the self-registered Customer role to add any address to that allowlist so that unauthenticated users can then send emails with attacker-controlled content to it through the site."}],"id":"CVE-2026-123670","lastModified":"2026-11-13T19:19:20.167","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123670","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:49:43.260016Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:53.587","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/04d772fe-001d-4f25-a11a-dedf16064ce4/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-123711.json b/data/2026/CVE-2026-123711.json
index 8713372ba9..4d12347301 100644
--- a/data/2026/CVE-2026-123711.json
+++ b/data/2026/CVE-2026-123711.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WPCOM Member","vendor":"Unknown","versions":[{"lessThan":"1.8.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WPCOM Member WordPress plugin before 1.8.3 does not limit or bind attempts to verify WeChat login codes, allowing unauthenticated attackers to brute-force a code issued to another user and log in as that user, including administrators, when WeChat official-account keyword login is enabled."}],"id":"CVE-2026-123711","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:53.687","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/7d7ca1b4-0d9e-4127-8252-cfe0bb51b18a/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WPCOM Member","vendor":"Unknown","versions":[{"lessThan":"1.8.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WPCOM Member WordPress plugin before 1.8.3 does not limit or bind attempts to verify WeChat login codes, allowing unauthenticated attackers to brute-force a code issued to another user and log in as that user, including administrators, when WeChat official-account keyword login is enabled."}],"id":"CVE-2026-123711","lastModified":"2026-11-13T19:19:20.320","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123711","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:49:29.320574Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:53.687","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/7d7ca1b4-0d9e-4127-8252-cfe0bb51b18a/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-287"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124005.json b/data/2026/CVE-2026-124005.json
index dfba63d7cc..f34317dc3b 100644
--- a/data/2026/CVE-2026-124005.json
+++ b/data/2026/CVE-2026-124005.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"XWEB EVO","vendor":"Copeland","versions":[{"lessThanOrEqual":"5.8.8","status":"affected","version":"4.3.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[{"sourceIdentifier":"disclosure@vulncheck.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"XWEB EVO 4.3.0 through 5.8.8 contains a weak password generation vulnerability that allows remote attackers to derive the Administrator code-of-the-day password using only the device MAC address and date, with no server secret involved. Attackers can analyze the firmware binary xwpasswd, which itself functions as the password generator, to compute valid Administrator credentials offline and authenticate to the device without authorization. This product line reached it's end of service date in March 2026."}],"id":"CVE-2026-124005","lastModified":"2026-11-13T15:17:34.660","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.2,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-12T20:18:22.673","references":[{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate"},{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/dixell/Content/Pages/AdvertisingMaterials/ProductNews/XWEB%20EVO%20EoS%20-%20Product_Bulletin_March_2026.pdf"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/dixell-copeland-xweb-evo-predictable-administrator-password-generation"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-330"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"XWEB EVO","vendor":"Copeland","versions":[{"lessThanOrEqual":"5.8.8","status":"affected","version":"4.3.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[{"sourceIdentifier":"disclosure@vulncheck.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"XWEB EVO 4.3.0 through 5.8.8 contains a weak password generation vulnerability that allows remote attackers to derive the Administrator code-of-the-day password using only the device MAC address and date, with no server secret involved. Attackers can analyze the firmware binary xwpasswd, which itself functions as the password generator, to compute valid Administrator credentials offline and authenticate to the device without authorization. This product line reached it's end of service date in March 2026."}],"id":"CVE-2026-124005","lastModified":"2026-11-13T19:19:20.483","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.2,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124005","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:04:00.346538Z","version":"2.0.3"}}]},"published":"2026-11-12T20:18:22.673","references":[{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate"},{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/dixell/Content/Pages/AdvertisingMaterials/ProductNews/XWEB%20EVO%20EoS%20-%20Product_Bulletin_March_2026.pdf"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/dixell-copeland-xweb-evo-predictable-administrator-password-generation"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-330"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124009.json b/data/2026/CVE-2026-124009.json
index f525bf6b36..8f48304e62 100644
--- a/data/2026/CVE-2026-124009.json
+++ b/data/2026/CVE-2026-124009.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"XWEB EVO","vendor":"Copeland","versions":[{"lessThanOrEqual":"5.8.8","status":"affected","version":"5.2.3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[{"sourceIdentifier":"disclosure@vulncheck.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability that allows authenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the output device path parameter processed by backup.lua. Attackers can exploit the unescaped concatenation into mount, unzip, and related shell commands run via the wlua interpreter, including through the setuid xwbackup.cgi and xwrestore.cgi interfaces, to achieve full system compromise. This product line reached it's end of service date in March 2026."}],"id":"CVE-2026-124009","lastModified":"2026-11-13T15:17:35.153","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-12T20:18:23.960","references":[{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate"},{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/dixell/Content/Pages/AdvertisingMaterials/ProductNews/XWEB%20EVO%20EoS%20-%20Product_Bulletin_March_2026.pdf"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/dixell-copeland-xweb-evo-os-command-injection-via-backup-lua"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"XWEB EVO","vendor":"Copeland","versions":[{"lessThanOrEqual":"5.8.8","status":"affected","version":"5.2.3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[{"sourceIdentifier":"disclosure@vulncheck.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability that allows authenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the output device path parameter processed by backup.lua. Attackers can exploit the unescaped concatenation into mount, unzip, and related shell commands run via the wlua interpreter, including through the setuid xwbackup.cgi and xwrestore.cgi interfaces, to achieve full system compromise. This product line reached it's end of service date in March 2026."}],"id":"CVE-2026-124009","lastModified":"2026-11-13T19:19:20.623","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124009","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:07:52.068133Z","version":"2.0.3"}}]},"published":"2026-11-12T20:18:23.960","references":[{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate"},{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/dixell/Content/Pages/AdvertisingMaterials/ProductNews/XWEB%20EVO%20EoS%20-%20Product_Bulletin_March_2026.pdf"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/dixell-copeland-xweb-evo-os-command-injection-via-backup-lua"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124013.json b/data/2026/CVE-2026-124013.json
index b4c00579bf..688169cab7 100644
--- a/data/2026/CVE-2026-124013.json
+++ b/data/2026/CVE-2026-124013.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"XWEB EVO","vendor":"Copeland","versions":[{"lessThanOrEqual":"5.8.8","status":"affected","version":"5.6.2","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[{"sourceIdentifier":"disclosure@vulncheck.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"XWEB EVO 5.6.2 through 5.8.8 contains an authenticated OS command injection vulnerability in the api.lua import_preconfiguration and restore actions, where server_url and related server credential fields are concatenated unescaped into a root curl command executed via io.popen. Attackers can inject malicious shell commands through these unfiltered parameters to achieve arbitrary command execution with root privileges on the underlying system. This product line reached it's end of service date in March 2026."}],"id":"CVE-2026-124013","lastModified":"2026-11-13T15:17:35.633","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-12T20:18:25.237","references":[{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate"},{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/dixell/Content/Pages/AdvertisingMaterials/ProductNews/XWEB%20EVO%20EoS%20-%20Product_Bulletin_March_2026.pdf"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/dixell-copeland-xweb-evo-os-command-injection-via-api-lua"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"XWEB EVO","vendor":"Copeland","versions":[{"lessThanOrEqual":"5.8.8","status":"affected","version":"5.6.2","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[{"sourceIdentifier":"disclosure@vulncheck.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"XWEB EVO 5.6.2 through 5.8.8 contains an authenticated OS command injection vulnerability in the api.lua import_preconfiguration and restore actions, where server_url and related server credential fields are concatenated unescaped into a root curl command executed via io.popen. Attackers can inject malicious shell commands through these unfiltered parameters to achieve arbitrary command execution with root privileges on the underlying system. This product line reached it's end of service date in March 2026."}],"id":"CVE-2026-124013","lastModified":"2026-11-13T20:18:16.630","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124013","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:22:05.458995Z","version":"2.0.3"}}]},"published":"2026-11-12T20:18:25.237","references":[{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate"},{"source":"disclosure@vulncheck.com","url":"https://webapps.copeland.com/dixell/Content/Pages/AdvertisingMaterials/ProductNews/XWEB%20EVO%20EoS%20-%20Product_Bulletin_March_2026.pdf"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/dixell-copeland-xweb-evo-os-command-injection-via-api-lua"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124279.json b/data/2026/CVE-2026-124279.json
index f706a71c0b..1848b55476 100644
--- a/data/2026/CVE-2026-124279.json
+++ b/data/2026/CVE-2026-124279.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"collectionURL":"https://repo.hex.pm","cpes":["cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy.Handler'","'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"grpc_server","packageURL":"pkg:hex/grpc_server","product":"grpc_server","programFiles":["lib/grpc/server/adapters/cowboy/handler.ex","lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy.Handler':info/3"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"1.1.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy.Handler'","'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"elixir-grpc/grpc","packageURL":"pkg:github/elixir-grpc/grpc","product":"grpc_server","programFiles":["grpc_server/lib/grpc/server/adapters/cowboy/handler.ex","grpc_server/lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy.Handler':info/3"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"b1e771d558941b1ed4b6de8b39f6a5375543db01","status":"affected","version":"49e18c3ec6bb9afe2f712caad3dbab5c56a68a00","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attackers to exhaust server memory via client-streaming or bidirectional-streaming requests.\n\nThe streaming read clause of GRPC.Server.Adapters.Cowboy.Handler.info/3 (grpc_server/lib/grpc/server/adapters/cowboy/handler.ex) asks Cowboy for up to 8,000,000 bytes per read and compares the running total with max_body_size only after the read returns. The gRPC length prefix of a message is not checked before the message is buffered. Each stream can therefore buffer up to one full read beyond the configured limit before it is refused, and many concurrent streams exhaust node memory. Releases before 1.0.6 apply no limit to streaming requests at all.\n\nThis issue affects grpc_server: from 1.0.0 before 1.1.0."}],"id":"CVE-2026-124279","lastModified":"2026-11-13T17:17:20.593","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]},"published":"2026-11-13T17:17:20.593","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2026-124279.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/commit/49e18c3ec6bb9afe2f712caad3dbab5c56a68a00"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/commit/b1e771d558941b1ed4b6de8b39f6a5375543db01"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/security/advisories/GHSA-736x-r87j-jhcm"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2026-124279"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"collectionURL":"https://repo.hex.pm","cpes":["cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy.Handler'","'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"grpc_server","packageURL":"pkg:hex/grpc_server","product":"grpc_server","programFiles":["lib/grpc/server/adapters/cowboy/handler.ex","lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy.Handler':info/3"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"1.1.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"collectionURL":"https://github.com","cpes":["cpe:2.3:a:elixir-grpc:grpc_server:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","modules":["'Elixir.GRPC.Server.Adapters.Cowboy.Handler'","'Elixir.GRPC.Server.Adapters.Cowboy'"],"packageName":"elixir-grpc/grpc","packageURL":"pkg:github/elixir-grpc/grpc","product":"grpc_server","programFiles":["grpc_server/lib/grpc/server/adapters/cowboy/handler.ex","grpc_server/lib/grpc/server/adapters/cowboy.ex"],"programRoutines":[{"name":"'Elixir.GRPC.Server.Adapters.Cowboy.Handler':info/3"},{"name":"'Elixir.GRPC.Server.Adapters.Cowboy':reading_stream/1"}],"repo":"https://github.com/elixir-grpc/grpc","vendor":"elixir-grpc","versions":[{"lessThan":"b1e771d558941b1ed4b6de8b39f6a5375543db01","status":"affected","version":"49e18c3ec6bb9afe2f712caad3dbab5c56a68a00","versionType":"git"}]}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attackers to exhaust server memory via client-streaming or bidirectional-streaming requests.\n\nThe streaming read clause of GRPC.Server.Adapters.Cowboy.Handler.info/3 (grpc_server/lib/grpc/server/adapters/cowboy/handler.ex) asks Cowboy for up to 8,000,000 bytes per read and compares the running total with max_body_size only after the read returns. The gRPC length prefix of a message is not checked before the message is buffered. Each stream can therefore buffer up to one full read beyond the configured limit before it is refused, and many concurrent streams exhaust node memory. Releases before 1.0.6 apply no limit to streaming requests at all.\n\nThis issue affects grpc_server: from 1.0.0 before 1.1.0."}],"id":"CVE-2026-124279","lastModified":"2026-11-13T20:18:17.663","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124279","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T17:55:00.516542Z","version":"2.0.3"}}]},"published":"2026-11-13T17:17:20.593","references":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://cna.erlef.org/cves/CVE-2026-124279.html"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/commit/49e18c3ec6bb9afe2f712caad3dbab5c56a68a00"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/commit/b1e771d558941b1ed4b6de8b39f6a5375543db01"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://github.com/elixir-grpc/grpc/security/advisories/GHSA-736x-r87j-jhcm"},{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","url":"https://osv.dev/vulnerability/EEF-CVE-2026-124279"}],"sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124664.json b/data/2026/CVE-2026-124664.json
index a270f188cb..0a3354414a 100644
--- a/data/2026/CVE-2026-124664.json
+++ b/data/2026/CVE-2026-124664.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Mine CloudVod","vendor":"Unknown","versions":[{"lessThan":"2.6.7","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Mine CloudVod WordPress plugin before 2.6.7 does not check whether the requester is enrolled in a course, or authorised at all, before returning the course's full curriculum together with the raw content of every published lesson, allowing unauthenticated visitors to retrieve paid lesson content, such as direct video source URLs, and the passwords of password-protected lessons."}],"id":"CVE-2026-124664","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:53.773","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/92b85179-c9b3-44a4-b72d-26c43b3a61bc/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Mine CloudVod","vendor":"Unknown","versions":[{"lessThan":"2.6.7","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Mine CloudVod WordPress plugin before 2.6.7 does not check whether the requester is enrolled in a course, or authorised at all, before returning the course's full curriculum together with the raw content of every published lesson, allowing unauthenticated visitors to retrieve paid lesson content, such as direct video source URLs, and the passwords of password-protected lessons."}],"id":"CVE-2026-124664","lastModified":"2026-11-13T19:19:22.037","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124664","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:49:20.632821Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:53.773","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/92b85179-c9b3-44a4-b72d-26c43b3a61bc/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124680.json b/data/2026/CVE-2026-124680.json
index cd386eb5e4..bdf39ba906 100644
--- a/data/2026/CVE-2026-124680.json
+++ b/data/2026/CVE-2026-124680.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:software-id/apache.org/apisix","product":"Apache APISIX","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"3.19.0","status":"affected","version":"0.9","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Interpretation Conflict, resulting in (Incorrect Authorization) vulnerability in Apache APISIX.\n\n\n\nAn unauthenticated client can reach upstream paths protected\nby a route-level auth plugin when a route without auth exists on the\nsame upstream and the upstream does not collapse encoded dot segments.\n\n\n\nThis issue affects Apache APISIX: from 0.9 through 3.19.0.\n\n\n\nUsers are recommended to upgrade to version 3.20.0, which fixes the issue."}],"id":"CVE-2026-124680","lastModified":"2026-11-13T18:17:31.533","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.0,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security@apache.org","type":"Secondary"}]},"published":"2026-11-13T18:17:31.533","references":[{"source":"security@apache.org","url":"https://lists.apache.org/thread/tsr691p4s58572og5f88p831vygbflvz"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-436"}],"source":"security@apache.org","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:software-id/apache.org/apisix","product":"Apache APISIX","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"3.19.0","status":"affected","version":"0.9","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Interpretation Conflict, resulting in (Incorrect Authorization) vulnerability in Apache APISIX.\n\n\n\nAn unauthenticated client can reach upstream paths protected\nby a route-level auth plugin when a route without auth exists on the\nsame upstream and the upstream does not collapse encoded dot segments.\n\n\n\nThis issue affects Apache APISIX: from 0.9 through 3.19.0.\n\n\n\nUsers are recommended to upgrade to version 3.20.0, which fixes the issue."}],"id":"CVE-2026-124680","lastModified":"2026-11-13T20:18:18.730","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.0,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security@apache.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124680","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:50:49.573399Z","version":"2.0.3"}}]},"published":"2026-11-13T18:17:31.533","references":[{"source":"security@apache.org","url":"https://lists.apache.org/thread/tsr691p4s58572og5f88p831vygbflvz"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-436"}],"source":"security@apache.org","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124719.json b/data/2026/CVE-2026-124719.json
index 133aa97034..30eade8c4e 100644
--- a/data/2026/CVE-2026-124719.json
+++ b/data/2026/CVE-2026-124719.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:software-id/apache.org/apisix","product":"Apache APISIX","vendor":"Apache Software Foundation","versions":[{"lessThan":"3.20.0","status":"affected","version":"3.19.0","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Authentication bypass by spoofing vulnerability in Apache APISIX.\n\n\n\nWhen a Route's configured headers carry a caller identity and the OpenAPI document declares\nthe same header, a caller can act as another identity against the\nupstream API. This issue affects Apache APISIX: from 3.19.0 before 3.20.0.\n\n\n\nUsers are recommended to upgrade to version 3.20.0, which fixes the issue."}],"id":"CVE-2026-124719","lastModified":"2026-11-13T18:17:31.803","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security@apache.org","type":"Secondary"}]},"published":"2026-11-13T18:17:31.803","references":[{"source":"security@apache.org","url":"https://lists.apache.org/thread/k7v3vfh09mr1spk4r5k8n1gsjrhk6d8x"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-290"}],"source":"security@apache.org","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:software-id/apache.org/apisix","product":"Apache APISIX","vendor":"Apache Software Foundation","versions":[{"lessThan":"3.20.0","status":"affected","version":"3.19.0","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Authentication bypass by spoofing vulnerability in Apache APISIX.\n\n\n\nWhen a Route's configured headers carry a caller identity and the OpenAPI document declares\nthe same header, a caller can act as another identity against the\nupstream API. This issue affects Apache APISIX: from 3.19.0 before 3.20.0.\n\n\n\nUsers are recommended to upgrade to version 3.20.0, which fixes the issue."}],"id":"CVE-2026-124719","lastModified":"2026-11-13T20:18:19.740","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security@apache.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124719","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:50:39.752278Z","version":"2.0.3"}}]},"published":"2026-11-13T18:17:31.803","references":[{"source":"security@apache.org","url":"https://lists.apache.org/thread/k7v3vfh09mr1spk4r5k8n1gsjrhk6d8x"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-290"}],"source":"security@apache.org","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124723.json b/data/2026/CVE-2026-124723.json
index eff3a1a44e..1cbae7b10f 100644
--- a/data/2026/CVE-2026-124723.json
+++ b/data/2026/CVE-2026-124723.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:software-id/apache.org/apisix","product":"Apache APISIX","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"3.19.0","status":"affected","version":"3.18.0","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Interpretation Conflict, leading to Incorrect Authorization vulnerability in Apache APISIX.\n\n\n\nWith match_uri_encoded_slash enabled and skip_mtls_uri_regex\nconfigured, a client without a certificate can reach an upstream\nbehind a route that requires one, limited to request paths that decode\nto an exempted URI. This issue affects Apache APISIX: from 3.18.0 through 3.19.0.\n\n\n\nUsers are recommended to upgrade to version 3.20.0, which fixes the issue."}],"id":"CVE-2026-124723","lastModified":"2026-11-13T18:17:31.930","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security@apache.org","type":"Secondary"}]},"published":"2026-11-13T18:17:31.930","references":[{"source":"security@apache.org","url":"https://lists.apache.org/thread/0r8dv4ytw5mkhrozlg7mgb9h6z5y7hpn"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-436"},{"lang":"en","value":"CWE-863"}],"source":"security@apache.org","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:software-id/apache.org/apisix","product":"Apache APISIX","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"3.19.0","status":"affected","version":"3.18.0","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Interpretation Conflict, leading to Incorrect Authorization vulnerability in Apache APISIX.\n\n\n\nWith match_uri_encoded_slash enabled and skip_mtls_uri_regex\nconfigured, a client without a certificate can reach an upstream\nbehind a route that requires one, limited to request paths that decode\nto an exempted URI. This issue affects Apache APISIX: from 3.18.0 through 3.19.0.\n\n\n\nUsers are recommended to upgrade to version 3.20.0, which fixes the issue."}],"id":"CVE-2026-124723","lastModified":"2026-11-13T20:18:20.753","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security@apache.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124723","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:49:56.142889Z","version":"2.0.3"}}]},"published":"2026-11-13T18:17:31.930","references":[{"source":"security@apache.org","url":"https://lists.apache.org/thread/0r8dv4ytw5mkhrozlg7mgb9h6z5y7hpn"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-436"},{"lang":"en","value":"CWE-863"}],"source":"security@apache.org","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124726.json b/data/2026/CVE-2026-124726.json
index 80bfbe91ab..49475b3fea 100644
--- a/data/2026/CVE-2026-124726.json
+++ b/data/2026/CVE-2026-124726.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:software-id/apache.org/apisix","product":"Apache APISIX","vendor":"Apache Software Foundation","versions":[{"lessThan":"3.20.0","status":"affected","version":"3.19.0","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX.\n\n\n\nA caller of the MCP endpoint can invoke endpoints the OpenAPI document\nnever declared, under the declared tool's HTTP method, using the credentials the\nRoute adds. This issue affects Apache APISIX: from 3.19.0 before 3.20.0.\n\n\n\nUsers are recommended to upgrade to version 3.20.0, which fixes the issue."}],"id":"CVE-2026-124726","lastModified":"2026-11-13T18:17:32.050","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security@apache.org","type":"Secondary"}]},"published":"2026-11-13T18:17:32.050","references":[{"source":"security@apache.org","url":"https://lists.apache.org/thread/1kodokhflvr51sc1qv985om3s6mozybg"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-23"}],"source":"security@apache.org","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:software-id/apache.org/apisix","product":"Apache APISIX","vendor":"Apache Software Foundation","versions":[{"lessThan":"3.20.0","status":"affected","version":"3.19.0","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX.\n\n\n\nA caller of the MCP endpoint can invoke endpoints the OpenAPI document\nnever declared, under the declared tool's HTTP method, using the credentials the\nRoute adds. This issue affects Apache APISIX: from 3.19.0 before 3.20.0.\n\n\n\nUsers are recommended to upgrade to version 3.20.0, which fixes the issue."}],"id":"CVE-2026-124726","lastModified":"2026-11-13T20:18:21.763","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security@apache.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124726","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:49:40.828881Z","version":"2.0.3"}}]},"published":"2026-11-13T18:17:32.050","references":[{"source":"security@apache.org","url":"https://lists.apache.org/thread/1kodokhflvr51sc1qv985om3s6mozybg"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-23"}],"source":"security@apache.org","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124758.json b/data/2026/CVE-2026-124758.json
index f0ff443e3a..cf32da3e94 100644
--- a/data/2026/CVE-2026-124758.json
+++ b/data/2026/CVE-2026-124758.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 does not check the record data length of an IODWrite request to a non-user record index against the size of the record block header. The 32-bit length is reduced by the header size before it is passed to the record handlers, so a length smaller than the header underflows and the handlers receive a data length of about 65530. The fixed-size reads of the I&M and PDPort handlers can then read past the end of the session buffer. The result of the write is discarded. The attacker must have an established Application Relationship or be able to send in the context of one, and requires ADJACENT network access."}],"id":"CVE-2026-124758","lastModified":"2026-11-13T14:17:50.293","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]},"published":"2026-11-13T14:17:50.183","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-191"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 does not check the record data length of an IODWrite request to a non-user record index against the size of the record block header. The 32-bit length is reduced by the header size before it is passed to the record handlers, so a length smaller than the header underflows and the handlers receive a data length of about 65530. The fixed-size reads of the I&M and PDPort handlers can then read past the end of the session buffer. The result of the write is discarded. The attacker must have an established Application Relationship or be able to send in the context of one, and requires ADJACENT network access."}],"id":"CVE-2026-124758","lastModified":"2026-11-13T20:18:22.747","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124758","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T20:00:23.928452Z","version":"2.0.3"}}]},"published":"2026-11-13T14:17:50.183","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-191"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124760.json b/data/2026/CVE-2026-124760.json
index 5efa2f5b0c..7823304149 100644
--- a/data/2026/CVE-2026-124760.json
+++ b/data/2026/CVE-2026-124760.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 sets the alarm receiver state to waiting for confirmation before the data of a received alarm notification is parsed. If the parsing fails the state is not restored, and later alarm notifications of the same priority are discarded without acknowledge until the Application Relationship is released. The Application Relationship and the cyclic data exchange keep working. The attacker must be able to send an alarm notification in the context of an established Application Relationship and requires ADJACENT network access."}],"id":"CVE-2026-124760","lastModified":"2026-11-13T14:17:50.573","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]},"published":"2026-11-13T14:17:50.480","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-754"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 sets the alarm receiver state to waiting for confirmation before the data of a received alarm notification is parsed. If the parsing fails the state is not restored, and later alarm notifications of the same priority are discarded without acknowledge until the Application Relationship is released. The Application Relationship and the cyclic data exchange keep working. The attacker must be able to send an alarm notification in the context of an established Application Relationship and requires ADJACENT network access."}],"id":"CVE-2026-124760","lastModified":"2026-11-13T20:18:23.740","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124760","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:55:10.449608Z","version":"2.0.3"}}]},"published":"2026-11-13T14:17:50.480","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-754"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124762.json b/data/2026/CVE-2026-124762.json
index 1da4c7543d..f9b15909c3 100644
--- a/data/2026/CVE-2026-124762.json
+++ b/data/2026/CVE-2026-124762.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"},{"lessThan":"*","status":"affected","version":"1.0.4","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or cancel PDU for the session aborts the Application Relationship, without checking that the PDU is the answer to a call of the device or where it comes from. A host with ADJACENT network access that has observed the activity UUID of the connection, which is sent in clear in every RPC request, can abort the Application Relationship with one PDU. It also allocates a session for an unknown activity UUID and changes the address stored for an existing session."}],"id":"CVE-2026-124762","lastModified":"2026-11-13T14:17:50.853","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]},"published":"2026-11-13T14:17:50.753","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-346"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"},{"lessThan":"*","status":"affected","version":"1.0.4","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or cancel PDU for the session aborts the Application Relationship, without checking that the PDU is the answer to a call of the device or where it comes from. A host with ADJACENT network access that has observed the activity UUID of the connection, which is sent in clear in every RPC request, can abort the Application Relationship with one PDU. It also allocates a session for an unknown activity UUID and changes the address stored for an existing session."}],"id":"CVE-2026-124762","lastModified":"2026-11-13T20:18:24.943","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124762","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:54:55.423925Z","version":"2.0.3"}}]},"published":"2026-11-13T14:17:50.753","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-346"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124763.json b/data/2026/CVE-2026-124763.json
index e6a0464ece..5c16fcb080 100644
--- a/data/2026/CVE-2026-124763.json
+++ b/data/2026/CVE-2026-124763.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Woocommerce Wishlist","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.1.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Woocommerce Wishlist WordPress plugin through 1.1.0 does not have authorisation and CSRF checks in one of its unauthenticated AJAX actions, allowing unauthenticated users to overwrite any site option with the URL of an uploaded image or an empty value, breaking the site (for example by changing its URL or active , or deactivating every Woocommerce Wishlist WordPress plugin through 1.1.0)."}],"id":"CVE-2026-124763","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:53.870","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/557b9f2b-4673-4efb-b7a5-f68c0b2222ac/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Woocommerce Wishlist","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.1.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Woocommerce Wishlist WordPress plugin through 1.1.0 does not have authorisation and CSRF checks in one of its unauthenticated AJAX actions, allowing unauthenticated users to overwrite any site option with the URL of an uploaded image or an empty value, breaking the site (for example by changing its URL or active , or deactivating every Woocommerce Wishlist WordPress plugin through 1.1.0)."}],"id":"CVE-2026-124763","lastModified":"2026-11-13T19:19:22.197","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124763","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:49:09.043141Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:53.870","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/557b9f2b-4673-4efb-b7a5-f68c0b2222ac/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124822.json b/data/2026/CVE-2026-124822.json
index 629bd622e6..e4100e18ec 100644
--- a/data/2026/CVE-2026-124822.json
+++ b/data/2026/CVE-2026-124822.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Easy DragDrop File Uploader","vendor":"Unknown","versions":[{"lessThan":"1.1.10","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Easy DragDrop File Uploader WordPress plugin before 1.1.10 does not validate a user-supplied path before deleting it, allowing unauthenticated users to delete arbitrary files and directories on the server, such as wp-config.php."}],"id":"CVE-2026-124822","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:53.960","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/2c3537df-1312-442a-816d-904285c0e9c1/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Easy DragDrop File Uploader","vendor":"Unknown","versions":[{"lessThan":"1.1.10","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Easy DragDrop File Uploader WordPress plugin before 1.1.10 does not validate a user-supplied path before deleting it, allowing unauthenticated users to delete arbitrary files and directories on the server, such as wp-config.php."}],"id":"CVE-2026-124822","lastModified":"2026-11-13T19:19:22.350","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":10.0,"baseSeverity":"CRITICAL","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.8,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124822","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:48:59.205278Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:53.960","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/2c3537df-1312-442a-816d-904285c0e9c1/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-73"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-124833.json b/data/2026/CVE-2026-124833.json
index e382cf992b..93a411db01 100644
--- a/data/2026/CVE-2026-124833.json
+++ b/data/2026/CVE-2026-124833.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Ahime Image Printer","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.0.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Ahime Image Printer WordPress plugin through 1.0.0 does not validate the name, extension or type of uploaded files before writing them to disk, allowing unauthenticated attackers to upload arbitrary files, including PHP, and execute code on the server."}],"id":"CVE-2026-124833","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:54.057","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/3b24b6d4-061c-4229-9ced-c2306eee44ea/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Ahime Image Printer","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.0.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Ahime Image Printer WordPress plugin through 1.0.0 does not validate the name, extension or type of uploaded files before writing them to disk, allowing unauthenticated attackers to upload arbitrary files, including PHP, and execute code on the server."}],"id":"CVE-2026-124833","lastModified":"2026-11-13T19:19:22.500","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-124833","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:43:53.388035Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:54.057","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/3b24b6d4-061c-4229-9ced-c2306eee44ea/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-434"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-125659.json b/data/2026/CVE-2026-125659.json
index 62204473ca..848175aa38 100644
--- a/data/2026/CVE-2026-125659.json
+++ b/data/2026/CVE-2026-125659.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 5.9.1.x to 5.9.3.x"}]},{"defaultStatus":"unaffected","platforms":["MacOS"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 3.2.4.x to 3.2.6.x"}]},{"defaultStatus":"unaffected","platforms":["Ubuntu"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 3.2.0.x to 3.3.0.x"}]},{"defaultStatus":"unaffected","platforms":["Red Hat"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 3.2.0.x to 3.3.0.x"}]}],"source":"vdisclose@cert-in.org.in"}],"cveTags":[],"descriptions":[{"lang":"en","value":"This vulnerability exists in the eMudhra emBridge due to missing authorization checks in the FileBrowser API endpoints. These endpoints perform file system enumeration using the LocalSystem account without adequately validating the requesting caller's authorization. An unauthenticated attacker on the same LAN could exploit this vulnerability by sending malicious webpage to the local HTTPS Web API.\n\n \n\nSuccessful exploitation of this vulnerability could allow the attacker to enumerate file and directory names and obtain information about the directory structure of the targeted system. \n\n\n\nThe vulnerability however, does not provide access to file contents or permit file modification, deletion, or code execution, or access to cryptographic keys and hardware token PINs."}],"id":"CVE-2026-125659","lastModified":"2026-11-13T11:17:16.400","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":2.1,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"vdisclose@cert-in.org.in","type":"Secondary"}]},"published":"2026-11-13T11:17:16.400","references":[{"source":"vdisclose@cert-in.org.in","url":"https://emudhra.com/en/post/cve-2026-125659"},{"source":"vdisclose@cert-in.org.in","url":"https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0549"}],"sourceIdentifier":"vdisclose@cert-in.org.in","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"vdisclose@cert-in.org.in","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 5.9.1.x to 5.9.3.x"}]},{"defaultStatus":"unaffected","platforms":["MacOS"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 3.2.4.x to 3.2.6.x"}]},{"defaultStatus":"unaffected","platforms":["Ubuntu"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 3.2.0.x to 3.3.0.x"}]},{"defaultStatus":"unaffected","platforms":["Red Hat"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 3.2.0.x to 3.3.0.x"}]}],"source":"vdisclose@cert-in.org.in"}],"cveTags":[],"descriptions":[{"lang":"en","value":"This vulnerability exists in the eMudhra emBridge due to missing authorization checks in the FileBrowser API endpoints. These endpoints perform file system enumeration using the LocalSystem account without adequately validating the requesting caller's authorization. An unauthenticated attacker on the same LAN could exploit this vulnerability by sending malicious webpage to the local HTTPS Web API.\n\n \n\nSuccessful exploitation of this vulnerability could allow the attacker to enumerate file and directory names and obtain information about the directory structure of the targeted system. \n\n\n\nThe vulnerability however, does not provide access to file contents or permit file modification, deletion, or code execution, or access to cryptographic keys and hardware token PINs."}],"id":"CVE-2026-125659","lastModified":"2026-11-13T20:18:26.307","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":2.1,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"vdisclose@cert-in.org.in","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125659","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:29:39.990073Z","version":"2.0.3"}}]},"published":"2026-11-13T11:17:16.400","references":[{"source":"vdisclose@cert-in.org.in","url":"https://emudhra.com/en/post/cve-2026-125659"},{"source":"vdisclose@cert-in.org.in","url":"https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0549"}],"sourceIdentifier":"vdisclose@cert-in.org.in","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"vdisclose@cert-in.org.in","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-125711.json b/data/2026/CVE-2026-125711.json
index f6114322f5..ad7814663f 100644
--- a/data/2026/CVE-2026-125711.json
+++ b/data/2026/CVE-2026-125711.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Widgets for Google Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"WP Tripadvisor Review Widgets","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Booking.com Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Reviews & Recommendations","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Airbnb Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Yelp Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Amazon Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Thumbtack Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Ebay Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Zillow Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Capterra Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Expedia Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Opentable Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for WordPress Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Hotels.com Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Review Widgets for Szallas.hu","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for AliExpress Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Árukereső Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Foursquare Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Alibaba Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for SourceForge Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Widgets for Google Reviews WordPress plugin before 14.3, WP Tripadvisor Review Widgets WordPress plugin before 14.3, Widgets for Booking.com Reviews WordPress plugin before 14.3, Widgets for Reviews & Recommendations WordPress plugin before 14.3, Widgets for Airbnb Reviews WordPress plugin before 14.3, Widgets for Yelp Reviews WordPress plugin before 14.3, Widgets for Amazon Reviews WordPress plugin before 14.3, Widgets for Thumbtack Reviews WordPress plugin before 14.3, Widgets for Ebay Reviews WordPress plugin before 14.3, Widgets for Zillow Reviews WordPress plugin before 14.3, Widgets for Capterra Reviews WordPress plugin before 14.3, Widgets for Expedia Reviews WordPress plugin before 14.3, Widgets for Opentable Reviews WordPress plugin before 14.3, Widgets for WordPress Reviews WordPress plugin before 14.3, Widgets for Hotels.com Reviews WordPress plugin before 14.3, Review Widgets for Szallas.hu WordPress plugin before 14.3, Widgets for AliExpress Reviews WordPress plugin before 14.3, Widgets for Árukereső Reviews WordPress plugin before 14.3, Widgets for Foursquare Reviews WordPress plugin before 14.3, Widgets for Alibaba Reviews WordPress plugin before 14.3, Widgets for SourceForge Reviews WordPress plugin before 14.3 do not sanitise and escape the connected business details before outputting them in their review widgets, which could allow users with the Editor role and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in a multisite setup)."}],"id":"CVE-2026-125711","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:54.143","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/87cbeff9-277e-48ea-b61a-53e1e2aaeed2/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Widgets for Google Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"WP Tripadvisor Review Widgets","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Booking.com Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Reviews & Recommendations","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Airbnb Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Yelp Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Amazon Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Thumbtack Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Ebay Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Zillow Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Capterra Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Expedia Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Opentable Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for WordPress Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Hotels.com Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Review Widgets for Szallas.hu","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for AliExpress Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Árukereső Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Foursquare Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for Alibaba Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Widgets for SourceForge Reviews","vendor":"Unknown","versions":[{"lessThan":"14.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Widgets for Google Reviews WordPress plugin before 14.3, WP Tripadvisor Review Widgets WordPress plugin before 14.3, Widgets for Booking.com Reviews WordPress plugin before 14.3, Widgets for Reviews & Recommendations WordPress plugin before 14.3, Widgets for Airbnb Reviews WordPress plugin before 14.3, Widgets for Yelp Reviews WordPress plugin before 14.3, Widgets for Amazon Reviews WordPress plugin before 14.3, Widgets for Thumbtack Reviews WordPress plugin before 14.3, Widgets for Ebay Reviews WordPress plugin before 14.3, Widgets for Zillow Reviews WordPress plugin before 14.3, Widgets for Capterra Reviews WordPress plugin before 14.3, Widgets for Expedia Reviews WordPress plugin before 14.3, Widgets for Opentable Reviews WordPress plugin before 14.3, Widgets for WordPress Reviews WordPress plugin before 14.3, Widgets for Hotels.com Reviews WordPress plugin before 14.3, Review Widgets for Szallas.hu WordPress plugin before 14.3, Widgets for AliExpress Reviews WordPress plugin before 14.3, Widgets for Árukereső Reviews WordPress plugin before 14.3, Widgets for Foursquare Reviews WordPress plugin before 14.3, Widgets for Alibaba Reviews WordPress plugin before 14.3, Widgets for SourceForge Reviews WordPress plugin before 14.3 do not sanitise and escape the connected business details before outputting them in their review widgets, which could allow users with the Editor role and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in a multisite setup)."}],"id":"CVE-2026-125711","lastModified":"2026-11-13T19:19:23.073","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125711","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:48:49.509665Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:54.143","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/87cbeff9-277e-48ea-b61a-53e1e2aaeed2/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-125912.json b/data/2026/CVE-2026-125912.json
index a4a896549a..700a2c4a4a 100644
--- a/data/2026/CVE-2026-125912.json
+++ b/data/2026/CVE-2026-125912.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WP Ultimate CSV Importer","vendor":"Unknown","versions":[{"lessThan":"9.2","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WP Ultimate CSV Importer  WordPress plugin before 9.2 does not restrict the destination filename and extension, nor validate the fetched content type, when importing remote media, allowing an Administrator of a Multisite subsite to write and execute arbitrary PHP in the shared WordPress context despite not being a Network Administrator and being unable to install WP Ultimate CSV Importer  WordPress plugin before 9.2 or edit files."}],"id":"CVE-2026-125912","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:54.260","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/b7484863-c97d-49d2-b818-0308a720c556/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WP Ultimate CSV Importer","vendor":"Unknown","versions":[{"lessThan":"9.2","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WP Ultimate CSV Importer  WordPress plugin before 9.2 does not restrict the destination filename and extension, nor validate the fetched content type, when importing remote media, allowing an Administrator of a Multisite subsite to write and execute arbitrary PHP in the shared WordPress context despite not being a Network Administrator and being unable to install WP Ultimate CSV Importer  WordPress plugin before 9.2 or edit files."}],"id":"CVE-2026-125912","lastModified":"2026-11-13T19:19:23.297","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125912","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:48:34.675473Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:54.260","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/b7484863-c97d-49d2-b818-0308a720c556/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-125948.json b/data/2026/CVE-2026-125948.json
index 057a1a5f5c..fee5893771 100644
--- a/data/2026/CVE-2026-125948.json
+++ b/data/2026/CVE-2026-125948.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Recipe Card Blocks Lite","vendor":"wpzoom","versions":[{"lessThanOrEqual":"3.7.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Recipe Card Blocks Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'steps[].text' parameter in all versions up to, and including, 3.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Because wp_kses_post() preserves block-delimiter HTML comments verbatim on save, a Contributor can embed event-handler payloads inside the block's steps[].text attribute in a draft or pending post without the unfiltered_html capability, and the payload executes for any visitor — including privileged editors and administrators who preview or publish the post — as well as through the public print endpoint."}],"id":"CVE-2026-125948","lastModified":"2026-11-13T10:17:28.617","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":2.7,"source":"security@wordfence.com","type":"Primary"}]},"published":"2026-11-13T10:17:28.483","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/recipe-card-blocks-by-wpzoom/tags/3.7.0/src/structured-data-blocks/class-wpzoom-recipe-card-block.php#L1999"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/recipe-card-blocks-by-wpzoom/tags/3.7.0/src/structured-data-blocks/class-wpzoom-steps.php#L184"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/recipe-card-blocks-by-wpzoom/tags/3.7.0/src/structured-data-blocks/class-wpzoom-steps.php#L63"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/recipe-card-blocks-by-wpzoom/tags/3.7.0/src/structured-data-blocks/class-wpzoom-steps.php#L90"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/changeset/3794649/recipe-card-blocks-by-wpzoom/trunk/src/structured-data-blocks/class-wpzoom-steps.php"},{"source":"security@wordfence.com","url":"https://wordpress.org/plugins/recipe-card-blocks-by-wpzoom/#developers"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ed1f200-d4ae-4c9e-a618-fbeb58c0f3f3?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@wordfence.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Recipe Card Blocks Lite","vendor":"wpzoom","versions":[{"lessThanOrEqual":"3.7.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Recipe Card Blocks Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'steps[].text' parameter in all versions up to, and including, 3.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Because wp_kses_post() preserves block-delimiter HTML comments verbatim on save, a Contributor can embed event-handler payloads inside the block's steps[].text attribute in a draft or pending post without the unfiltered_html capability, and the payload executes for any visitor — including privileged editors and administrators who preview or publish the post — as well as through the public print endpoint."}],"id":"CVE-2026-125948","lastModified":"2026-11-13T20:18:27.487","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":2.7,"source":"security@wordfence.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125948","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:28:53.797986Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:28.483","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/recipe-card-blocks-by-wpzoom/tags/3.7.0/src/structured-data-blocks/class-wpzoom-recipe-card-block.php#L1999"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/recipe-card-blocks-by-wpzoom/tags/3.7.0/src/structured-data-blocks/class-wpzoom-steps.php#L184"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/recipe-card-blocks-by-wpzoom/tags/3.7.0/src/structured-data-blocks/class-wpzoom-steps.php#L63"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/recipe-card-blocks-by-wpzoom/tags/3.7.0/src/structured-data-blocks/class-wpzoom-steps.php#L90"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/changeset/3794649/recipe-card-blocks-by-wpzoom/trunk/src/structured-data-blocks/class-wpzoom-steps.php"},{"source":"security@wordfence.com","url":"https://wordpress.org/plugins/recipe-card-blocks-by-wpzoom/#developers"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ed1f200-d4ae-4c9e-a618-fbeb58c0f3f3?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@wordfence.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126119.json b/data/2026/CVE-2026-126119.json
index 40047e22de..ec14ce2b9c 100644
--- a/data/2026/CVE-2026-126119.json
+++ b/data/2026/CVE-2026-126119.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Streamit","vendor":"Unknown","versions":[{"lessThan":"1.3.10","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Streamit WordPress plugin before 1.3.10 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated attackers to call arbitrary functions (for example to create an administrator account), leading to privilege escalation and remote code execution."}],"id":"CVE-2026-126119","lastModified":"2026-11-13T15:45:24.843","metrics":{},"published":"2026-11-13T06:16:54.350","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/41d42891-1170-4e84-959c-d2eec010bf7c/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Streamit","vendor":"Unknown","versions":[{"lessThan":"1.3.10","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Streamit WordPress plugin before 1.3.10 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated attackers to call arbitrary functions (for example to create an administrator account), leading to privilege escalation and remote code execution."}],"id":"CVE-2026-126119","lastModified":"2026-11-13T19:19:23.517","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126119","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:43:22.949552Z","version":"2.0.3"}}]},"published":"2026-11-13T06:16:54.350","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/41d42891-1170-4e84-959c-d2eec010bf7c/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126191.json b/data/2026/CVE-2026-126191.json
index 940f07e57b..e439323ada 100644
--- a/data/2026/CVE-2026-126191.json
+++ b/data/2026/CVE-2026-126191.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"soupsieve","vendor":"facelessuser","versions":[{"status":"affected","version":"< 3.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 3.0, the CSS_ESCAPES and IDENTIFIER regular-expression subpatterns can backtrack exponentially on runs of ambiguous digit escapes in an attribute-name or tag position of an otherwise valid selector. The failure occurs during selector compilation through soupsieve.compile() or Beautiful Soup select() before SELECTOR_LIMIT is applied, so an application that accepts untrusted selector strings can have a worker stalled by a short input. This issue is fixed in version 3.0."}],"id":"CVE-2026-126191","lastModified":"2026-11-12T19:09:06.967","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-12T17:17:32.627","references":[{"source":"security-advisories@github.com","url":"https://github.com/facelessuser/soupsieve/commit/dbfa2854ff31a863326bd6660d4e55c6f068db9e"},{"source":"security-advisories@github.com","url":"https://github.com/facelessuser/soupsieve/pull/300"},{"source":"security-advisories@github.com","url":"https://github.com/facelessuser/soupsieve/releases/tag/3.0"},{"source":"security-advisories@github.com","url":"https://github.com/facelessuser/soupsieve/security/advisories/GHSA-6655-6qjp-jx7x"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1333"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"soupsieve","vendor":"facelessuser","versions":[{"status":"affected","version":"< 3.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 3.0, the CSS_ESCAPES and IDENTIFIER regular-expression subpatterns can backtrack exponentially on runs of ambiguous digit escapes in an attribute-name or tag position of an otherwise valid selector. The failure occurs during selector compilation through soupsieve.compile() or Beautiful Soup select() before SELECTOR_LIMIT is applied, so an application that accepts untrusted selector strings can have a worker stalled by a short input. This issue is fixed in version 3.0."}],"id":"CVE-2026-126191","lastModified":"2026-11-13T19:19:23.660","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126191","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:52:59.234584Z","version":"2.0.3"}}]},"published":"2026-11-12T17:17:32.627","references":[{"source":"security-advisories@github.com","url":"https://github.com/facelessuser/soupsieve/commit/dbfa2854ff31a863326bd6660d4e55c6f068db9e"},{"source":"security-advisories@github.com","url":"https://github.com/facelessuser/soupsieve/pull/300"},{"source":"security-advisories@github.com","url":"https://github.com/facelessuser/soupsieve/releases/tag/3.0"},{"source":"security-advisories@github.com","url":"https://github.com/facelessuser/soupsieve/security/advisories/GHSA-6655-6qjp-jx7x"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-1333"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126197.json b/data/2026/CVE-2026-126197.json
index 9ed822ee5f..37b93848c7 100644
--- a/data/2026/CVE-2026-126197.json
+++ b/data/2026/CVE-2026-126197.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"pgedge-postgres-mcp","vendor":"pgEdge","versions":[{"status":"affected","version":"< 1.1.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, custom pl-do tools interpolated JSON arguments into a PostgreSQL DO block delimited by fixed dollar-quote tags. An argument containing $mcp_custom_tool$ could terminate the block and inject arbitrary SQL statements, while $mcp_args$ could inject procedural code into a plpgsql block. Because the statement used the simple query protocol, injected text could include additional statements and transaction control, bypassing read_only and accessing data or modifying resources available to the connecting role. The issue requires at least one pl-do custom tool; sql and pl-func tools pass arguments as bind parameters and are not affected by this injection mechanism. This issue is fixed in 1.1.0."}],"id":"CVE-2026-126197","lastModified":"2026-11-12T19:09:06.967","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-12T18:17:24.780","references":[{"source":"security-advisories@github.com","url":"https://github.com/pgEdge/pgedge-postgres-mcp/commit/b5b929305de7a22cd6ed7de8ae1be2ac90ca0868"},{"source":"security-advisories@github.com","url":"https://github.com/pgEdge/pgedge-postgres-mcp/pull/196"},{"source":"security-advisories@github.com","url":"https://github.com/pgEdge/pgedge-postgres-mcp/releases/tag/v1.1.0"},{"source":"security-advisories@github.com","url":"https://github.com/pgEdge/pgedge-postgres-mcp/security/advisories/GHSA-r5pp-jx86-r6r9"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"pgedge-postgres-mcp","vendor":"pgEdge","versions":[{"status":"affected","version":"< 1.1.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, custom pl-do tools interpolated JSON arguments into a PostgreSQL DO block delimited by fixed dollar-quote tags. An argument containing $mcp_custom_tool$ could terminate the block and inject arbitrary SQL statements, while $mcp_args$ could inject procedural code into a plpgsql block. Because the statement used the simple query protocol, injected text could include additional statements and transaction control, bypassing read_only and accessing data or modifying resources available to the connecting role. The issue requires at least one pl-do custom tool; sql and pl-func tools pass arguments as bind parameters and are not affected by this injection mechanism. This issue is fixed in 1.1.0."}],"id":"CVE-2026-126197","lastModified":"2026-11-13T19:19:23.773","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126197","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:57:00.288680Z","version":"2.0.3"}}]},"published":"2026-11-12T18:17:24.780","references":[{"source":"security-advisories@github.com","url":"https://github.com/pgEdge/pgedge-postgres-mcp/commit/b5b929305de7a22cd6ed7de8ae1be2ac90ca0868"},{"source":"security-advisories@github.com","url":"https://github.com/pgEdge/pgedge-postgres-mcp/pull/196"},{"source":"security-advisories@github.com","url":"https://github.com/pgEdge/pgedge-postgres-mcp/releases/tag/v1.1.0"},{"source":"security-advisories@github.com","url":"https://github.com/pgEdge/pgedge-postgres-mcp/security/advisories/GHSA-r5pp-jx86-r6r9"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126204.json b/data/2026/CVE-2026-126204.json
index 59c2c7615c..72aefa1df0 100644
--- a/data/2026/CVE-2026-126204.json
+++ b/data/2026/CVE-2026-126204.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"express-rate-limit","vendor":"express-rate-limit","versions":[{"status":"affected","version":">= 8.6.0, < 8.7.2"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"express-rate-limit is a basic rate-limiting middleware for Express. From 8.6.0 until 8.7.2, the built-in MemoryStore returns a Client whose mutable resetTime object is retained by middleware using skipFailedRequests or skipSuccessfulRequests. When a later request resets the client window, MemoryStore.resetClient mutates that same Date, so an earlier request that finishes or disconnects after the reset can pass the stale-window guard and decrement the current window's count. A client able to keep requests in flight across the boundary can obtain a bounded extra burst of up to one additional configured limit in the new window; the behavior does not increase the sustained rate. Stores that return a fresh Date are not affected. This issue is fixed in version 8.7.2."}],"id":"CVE-2026-126204","lastModified":"2026-11-12T22:09:39.233","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-12T19:16:56.713","references":[{"source":"security-advisories@github.com","url":"https://github.com/express-rate-limit/express-rate-limit/commit/da5b115b97dd903076d37b19437fbd71445e150b"},{"source":"security-advisories@github.com","url":"https://github.com/express-rate-limit/express-rate-limit/pull/707"},{"source":"security-advisories@github.com","url":"https://github.com/express-rate-limit/express-rate-limit/releases/tag/v8.7.2"},{"source":"security-advisories@github.com","url":"https://github.com/express-rate-limit/express-rate-limit/security/advisories/GHSA-j3cq-92fq-qg5f"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-682"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"express-rate-limit","vendor":"express-rate-limit","versions":[{"status":"affected","version":">= 8.6.0, < 8.7.2"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"express-rate-limit is a basic rate-limiting middleware for Express. From 8.6.0 until 8.7.2, the built-in MemoryStore returns a Client whose mutable resetTime object is retained by middleware using skipFailedRequests or skipSuccessfulRequests. When a later request resets the client window, MemoryStore.resetClient mutates that same Date, so an earlier request that finishes or disconnects after the reset can pass the stale-window guard and decrement the current window's count. A client able to keep requests in flight across the boundary can obtain a bounded extra burst of up to one additional configured limit in the new window; the behavior does not increase the sustained rate. Stores that return a fresh Date are not affected. This issue is fixed in version 8.7.2."}],"id":"CVE-2026-126204","lastModified":"2026-11-13T19:19:23.890","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126204","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:01:53.223246Z","version":"2.0.3"}}]},"published":"2026-11-12T19:16:56.713","references":[{"source":"security-advisories@github.com","url":"https://github.com/express-rate-limit/express-rate-limit/commit/da5b115b97dd903076d37b19437fbd71445e150b"},{"source":"security-advisories@github.com","url":"https://github.com/express-rate-limit/express-rate-limit/pull/707"},{"source":"security-advisories@github.com","url":"https://github.com/express-rate-limit/express-rate-limit/releases/tag/v8.7.2"},{"source":"security-advisories@github.com","url":"https://github.com/express-rate-limit/express-rate-limit/security/advisories/GHSA-j3cq-92fq-qg5f"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-682"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126207.json b/data/2026/CVE-2026-126207.json
index 5603826033..9f87e0b3d3 100644
--- a/data/2026/CVE-2026-126207.json
+++ b/data/2026/CVE-2026-126207.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"loofah","vendor":"flavorjones","versions":[{"status":"affected","version":"< 2.25.3"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.3, Loofah::HTML5::Scrub.scrub_css checks only the first parse of a style attribute, then rebuilds CSS with identifier escapes decoded so escaped parentheses, property names, comments, or quotes can become a live url() without a second safety check. An attacker can use list-style to make a viewer's browser request an attacker-chosen URL when content renders, or cursor to make the request on hover. The request can disclose the viewer's IP address, user agent, access timing, and access to internal-network hosts, but no script survives sanitization and the attacker cannot read the response. This issue is fixed in version 2.25.3."}],"id":"CVE-2026-126207","lastModified":"2026-11-12T22:09:39.233","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-12T21:17:21.853","references":[{"source":"security-advisories@github.com","url":"https://github.com/flavorjones/loofah/commit/b198a36e44c9c5408163ac50787825e8ca0b166b"},{"source":"security-advisories@github.com","url":"https://github.com/flavorjones/loofah/pull/324"},{"source":"security-advisories@github.com","url":"https://github.com/flavorjones/loofah/releases/tag/v2.25.3"},{"source":"security-advisories@github.com","url":"https://github.com/flavorjones/loofah/security/advisories/GHSA-m3x9-938q-5767"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-180"},{"lang":"en","value":"CWE-184"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"loofah","vendor":"flavorjones","versions":[{"status":"affected","version":"< 2.25.3"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.3, Loofah::HTML5::Scrub.scrub_css checks only the first parse of a style attribute, then rebuilds CSS with identifier escapes decoded so escaped parentheses, property names, comments, or quotes can become a live url() without a second safety check. An attacker can use list-style to make a viewer's browser request an attacker-chosen URL when content renders, or cursor to make the request on hover. The request can disclose the viewer's IP address, user agent, access timing, and access to internal-network hosts, but no script survives sanitization and the attacker cannot read the response. This issue is fixed in version 2.25.3."}],"id":"CVE-2026-126207","lastModified":"2026-11-13T20:18:28.757","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126207","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:42:04.755994Z","version":"2.0.3"}}]},"published":"2026-11-12T21:17:21.853","references":[{"source":"security-advisories@github.com","url":"https://github.com/flavorjones/loofah/commit/b198a36e44c9c5408163ac50787825e8ca0b166b"},{"source":"security-advisories@github.com","url":"https://github.com/flavorjones/loofah/pull/324"},{"source":"security-advisories@github.com","url":"https://github.com/flavorjones/loofah/releases/tag/v2.25.3"},{"source":"security-advisories@github.com","url":"https://github.com/flavorjones/loofah/security/advisories/GHSA-m3x9-938q-5767"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-180"},{"lang":"en","value":"CWE-184"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126343.json b/data/2026/CVE-2026-126343.json
index fa5e376320..009e46d2b9 100644
--- a/data/2026/CVE-2026-126343.json
+++ b/data/2026/CVE-2026-126343.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"node-server","vendor":"honojs","versions":[{"status":"affected","version":">= 2.0.0, < 2.1.6"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.1.6, the WebSocket upgrade handler waits for the Hono application to finish asynchronous middleware or handler work without first attaching an error listener to the socket. If an unauthenticated client resets the TCP connection during that window, the socket emits an unhandled ECONNRESET error and terminates the Node.js process. If a global uncaughtException handler suppresses termination, the pending upgrade waiter is not released and repeated requests can grow the heap. This affects applications that enable WebSocket support and perform asynchronous work on the upgrade path. This issue is fixed in version 2.1.6."}],"id":"CVE-2026-126343","lastModified":"2026-11-12T22:19:19.140","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-12T22:19:19.140","references":[{"source":"security-advisories@github.com","url":"https://github.com/honojs/node-server/commit/61cc0267e613e684401f17c27538ba3bf97339a4"},{"source":"security-advisories@github.com","url":"https://github.com/honojs/node-server/releases/tag/v2.1.6"},{"source":"security-advisories@github.com","url":"https://github.com/honojs/node-server/security/advisories/GHSA-qv5m-9pm6-hqp3"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-248"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"node-server","vendor":"honojs","versions":[{"status":"affected","version":">= 2.0.0, < 2.1.6"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.1.6, the WebSocket upgrade handler waits for the Hono application to finish asynchronous middleware or handler work without first attaching an error listener to the socket. If an unauthenticated client resets the TCP connection during that window, the socket emits an unhandled ECONNRESET error and terminates the Node.js process. If a global uncaughtException handler suppresses termination, the pending upgrade waiter is not released and repeated requests can grow the heap. This affects applications that enable WebSocket support and perform asynchronous work on the upgrade path. This issue is fixed in version 2.1.6."}],"id":"CVE-2026-126343","lastModified":"2026-11-13T20:18:29.750","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126343","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:43:20.061111Z","version":"2.0.3"}}]},"published":"2026-11-12T22:19:19.140","references":[{"source":"security-advisories@github.com","url":"https://github.com/honojs/node-server/commit/61cc0267e613e684401f17c27538ba3bf97339a4"},{"source":"security-advisories@github.com","url":"https://github.com/honojs/node-server/releases/tag/v2.1.6"},{"source":"security-advisories@github.com","url":"https://github.com/honojs/node-server/security/advisories/GHSA-qv5m-9pm6-hqp3"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-248"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126347.json b/data/2026/CVE-2026-126347.json
index 139121758e..592e116d88 100644
--- a/data/2026/CVE-2026-126347.json
+++ b/data/2026/CVE-2026-126347.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"tornado","vendor":"tornadoweb","versions":[{"status":"affected","version":"< 6.6.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Tornado is a Python web framework and asynchronous networking library. In versions through 6.6.0, applications using  tornado.web.RedirectHandler  with URL templates that allow attacker-controlled substitutions to influence the destination can be vulnerable to an open redirect using three or more leading slashes. Differences between Python’s URL parsing and browser URL interpretation allow a crafted destination to redirect a user to an attacker-controlled host. The remediation for CVE-2026-116578 in version 6.6.0 did not fully address this case. This issue is fixed in version 6.6.1."}],"id":"CVE-2026-126347","lastModified":"2026-11-12T22:19:19.900","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-12T22:19:19.767","references":[{"source":"security-advisories@github.com","url":"https://github.com/tornadoweb/tornado/commit/c503241622c0efe7c40110d89834ce8b7fead1e4"},{"source":"security-advisories@github.com","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-5cjw-f85j-cv6r"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-601"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"tornado","vendor":"tornadoweb","versions":[{"status":"affected","version":"< 6.6.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Tornado is a Python web framework and asynchronous networking library. In versions through 6.6.0, applications using  tornado.web.RedirectHandler  with URL templates that allow attacker-controlled substitutions to influence the destination can be vulnerable to an open redirect using three or more leading slashes. Differences between Python’s URL parsing and browser URL interpretation allow a crafted destination to redirect a user to an attacker-controlled host. The remediation for CVE-2026-116578 in version 6.6.0 did not fully address this case. This issue is fixed in version 6.6.1."}],"id":"CVE-2026-126347","lastModified":"2026-11-13T20:18:30.873","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126347","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:44:59.218911Z","version":"2.0.3"}}]},"published":"2026-11-12T22:19:19.767","references":[{"source":"security-advisories@github.com","url":"https://github.com/tornadoweb/tornado/commit/c503241622c0efe7c40110d89834ce8b7fead1e4"},{"source":"security-advisories@github.com","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-5cjw-f85j-cv6r"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-601"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126351.json b/data/2026/CVE-2026-126351.json
index 6fc6a0dc42..7d2d232184 100644
--- a/data/2026/CVE-2026-126351.json
+++ b/data/2026/CVE-2026-126351.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"addressable","vendor":"sporkmonger","versions":[{"status":"affected","version":"< 2.9.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. Prior to 2.9.1, Addressable::URI.normalize_path repeatedly scans and rewrites paths while removing only one nested dot segment per pass, producing quadratic work. URI#normalize, URI#normalized_path, URI#join, URI#==, and URI#=== inherit the behavior, so processing a sufficiently long attacker-controlled URI can consume a worker thread and cause denial of service on every Ruby implementation. URI.parse alone and code that never normalizes, compares, or joins untrusted URIs are unaffected. This issue is fixed in version 2.9.1."}],"id":"CVE-2026-126351","lastModified":"2026-11-13T16:08:55.993","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-12T22:19:20.387","references":[{"source":"security-advisories@github.com","url":"https://github.com/sporkmonger/addressable/commit/25c7c412a2f7e06c3cac92872e831f6d053703c5"},{"source":"security-advisories@github.com","url":"https://github.com/sporkmonger/addressable/releases/tag/addressable-2.9.1"},{"source":"security-advisories@github.com","url":"https://github.com/sporkmonger/addressable/security/advisories/GHSA-qq38-m9mg-xjj5"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-407"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"addressable","vendor":"sporkmonger","versions":[{"status":"affected","version":"< 2.9.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. Prior to 2.9.1, Addressable::URI.normalize_path repeatedly scans and rewrites paths while removing only one nested dot segment per pass, producing quadratic work. URI#normalize, URI#normalized_path, URI#join, URI#==, and URI#=== inherit the behavior, so processing a sufficiently long attacker-controlled URI can consume a worker thread and cause denial of service on every Ruby implementation. URI.parse alone and code that never normalizes, compares, or joins untrusted URIs are unaffected. This issue is fixed in version 2.9.1."}],"id":"CVE-2026-126351","lastModified":"2026-11-13T20:18:31.973","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126351","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:45:49.464052Z","version":"2.0.3"}}]},"published":"2026-11-12T22:19:20.387","references":[{"source":"security-advisories@github.com","url":"https://github.com/sporkmonger/addressable/commit/25c7c412a2f7e06c3cac92872e831f6d053703c5"},{"source":"security-advisories@github.com","url":"https://github.com/sporkmonger/addressable/releases/tag/addressable-2.9.1"},{"source":"security-advisories@github.com","url":"https://github.com/sporkmonger/addressable/security/advisories/GHSA-qq38-m9mg-xjj5"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-407"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126355.json b/data/2026/CVE-2026-126355.json
index 2e2d872ab1..62cb66254c 100644
--- a/data/2026/CVE-2026-126355.json
+++ b/data/2026/CVE-2026-126355.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"hono","vendor":"honojs","versions":[{"status":"affected","version":"< 4.13.16"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, csrf() limits origin validation to the content types normally sent by HTML forms and therefore does not validate text/ping requests generated by Chromium hyperlink auditing. Chrome and Edge can send a cross-origin credentialed POST without a CORS preflight through an &lt;a ping&gt; action, and the middleware then skips both Origin and Sec-Fetch-Site checks. The fixed request body limits exploitation to state-changing endpoints whose effect is selected by the path or query string and does not depend on submitted body data. The user's cookie must accompany the request, which generally requires a same-site origin or a cookie configured with SameSite=None, and Firefox does not send hyperlink-auditing pings by default. This issue is fixed in version 4.13.16."}],"id":"CVE-2026-126355","lastModified":"2026-11-13T00:20:10.630","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T00:20:10.447","references":[{"source":"security-advisories@github.com","url":"https://github.com/honojs/hono/commit/bf16471913b5199212dac33f5d170f94745dd26a"},{"source":"security-advisories@github.com","url":"https://github.com/honojs/hono/releases/tag/v4.13.16"},{"source":"security-advisories@github.com","url":"https://github.com/honojs/hono/security/advisories/GHSA-46wx-v44x-9hh2"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-352"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"hono","vendor":"honojs","versions":[{"status":"affected","version":"< 4.13.16"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, csrf() limits origin validation to the content types normally sent by HTML forms and therefore does not validate text/ping requests generated by Chromium hyperlink auditing. Chrome and Edge can send a cross-origin credentialed POST without a CORS preflight through an &lt;a ping&gt; action, and the middleware then skips both Origin and Sec-Fetch-Site checks. The fixed request body limits exploitation to state-changing endpoints whose effect is selected by the path or query string and does not depend on submitted body data. The user's cookie must accompany the request, which generally requires a same-site origin or a cookie configured with SameSite=None, and Firefox does not send hyperlink-auditing pings by default. This issue is fixed in version 4.13.16."}],"id":"CVE-2026-126355","lastModified":"2026-11-13T20:18:32.967","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126355","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:47:57.793738Z","version":"2.0.3"}}]},"published":"2026-11-13T00:20:10.447","references":[{"source":"security-advisories@github.com","url":"https://github.com/honojs/hono/commit/bf16471913b5199212dac33f5d170f94745dd26a"},{"source":"security-advisories@github.com","url":"https://github.com/honojs/hono/releases/tag/v4.13.16"},{"source":"security-advisories@github.com","url":"https://github.com/honojs/hono/security/advisories/GHSA-46wx-v44x-9hh2"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-352"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126416.json b/data/2026/CVE-2026-126416.json
index e91354b9fc..88d470cf45 100644
--- a/data/2026/CVE-2026-126416.json
+++ b/data/2026/CVE-2026-126416.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an improper authorization vulnerability in patient_tracker_status.php that allows low-privilege authenticated users to modify other patients' tracker entries by supplying arbitrary tracker_id values. Attackers can post statustype and roomnum parameters with a valid CSRF token to alter patient-flow status, room assignments, and linked calendar appointment state."}],"id":"CVE-2026-126416","lastModified":"2026-11-13T10:17:47.287","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:47.163","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-cxjf-fmpw-qc34"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-improper-authorization-via-patient-tracker-status-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-285"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an improper authorization vulnerability in patient_tracker_status.php that allows low-privilege authenticated users to modify other patients' tracker entries by supplying arbitrary tracker_id values. Attackers can post statustype and roomnum parameters with a valid CSRF token to alter patient-flow status, room assignments, and linked calendar appointment state."}],"id":"CVE-2026-126416","lastModified":"2026-11-13T20:18:33.960","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126416","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:30:16.907363Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:47.163","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-cxjf-fmpw-qc34"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-improper-authorization-via-patient-tracker-status-php"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-cxjf-fmpw-qc34"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-285"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126420.json b/data/2026/CVE-2026-126420.json
index f55f67d9e6..d988cf4f78 100644
--- a/data/2026/CVE-2026-126420.json
+++ b/data/2026/CVE-2026-126420.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in the FaxSMS module's utility.php that allows read-only demographics users to create patient charts. Attackers can submit the form_create request with chosen identity fields to create fictitious or duplicate patients with employer, history, and insurance records."}],"id":"CVE-2026-126420","lastModified":"2026-11-13T10:17:47.970","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":1.6,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:47.843","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-ppg9-2f9f-chc4"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-in-faxsms-utility-php-patient-creation"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in the FaxSMS module's utility.php that allows read-only demographics users to create patient charts. Attackers can submit the form_create request with chosen identity fields to create fictitious or duplicate patients with employer, history, and insurance records."}],"id":"CVE-2026-126420","lastModified":"2026-11-13T20:18:35.003","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":1.6,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126420","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:31:11.557616Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:47.843","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-ppg9-2f9f-chc4"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-in-faxsms-utility-php-patient-creation"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-ppg9-2f9f-chc4"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126428.json b/data/2026/CVE-2026-126428.json
index 97c4187769..4c25e31c30 100644
--- a/data/2026/CVE-2026-126428.json
+++ b/data/2026/CVE-2026-126428.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a remote code execution vulnerability that allows authenticated billing users to store attacker-controlled PHP by uploading a malformed ERA file to era_payments.php. Attackers with a database-write primitive such as SQL injection can register a background_services row whose require_once loads the stored .edi file, executing PHP as the web-server user."}],"id":"CVE-2026-126428","lastModified":"2026-11-13T10:17:49.317","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:49.193","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-r6wm-8m2j-c3q9"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-rce-via-stored-era-upload-and-background-services"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-434"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a remote code execution vulnerability that allows authenticated billing users to store attacker-controlled PHP by uploading a malformed ERA file to era_payments.php. Attackers with a database-write primitive such as SQL injection can register a background_services row whose require_once loads the stored .edi file, executing PHP as the web-server user."}],"id":"CVE-2026-126428","lastModified":"2026-11-13T20:18:36.087","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126428","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T20:10:53.276565Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:49.193","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-r6wm-8m2j-c3q9"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-rce-via-stored-era-upload-and-background-services"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-r6wm-8m2j-c3q9"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-434"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126432.json b/data/2026/CVE-2026-126432.json
index ffb12f9cc9..fb60a5e44b 100644
--- a/data/2026/CVE-2026-126432.json
+++ b/data/2026/CVE-2026-126432.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an improper authorization vulnerability in interface/orders/list_reports.php that allows read-only users to transmit lab orders because the patients/med check ignores write permission. Authenticated attackers can submit form_xmit with arbitrary procedure order IDs to send HL7 orders containing SSNs, insurance, and diagnoses to laboratories and mark them transmitted."}],"id":"CVE-2026-126432","lastModified":"2026-11-13T10:17:49.987","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":1.6,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:49.867","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-3xjm-656g-cfj5"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-improper-authorization-in-lab-order-transmission-via-list-reports-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an improper authorization vulnerability in interface/orders/list_reports.php that allows read-only users to transmit lab orders because the patients/med check ignores write permission. Authenticated attackers can submit form_xmit with arbitrary procedure order IDs to send HL7 orders containing SSNs, insurance, and diagnoses to laboratories and mark them transmitted."}],"id":"CVE-2026-126432","lastModified":"2026-11-13T20:18:37.100","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":1.6,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126432","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T20:09:10.770826Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:49.867","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-3xjm-656g-cfj5"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-improper-authorization-in-lab-order-transmission-via-list-reports-php"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-3xjm-656g-cfj5"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126436.json b/data/2026/CVE-2026-126436.json
index 0dd86d54eb..23a34400b6 100644
--- a/data/2026/CVE-2026-126436.json
+++ b/data/2026/CVE-2026-126436.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an authorization bypass vulnerability that allows OAuth2 clients to use unregistered grant types because oauth_clients.grant_types is never enforced. Attackers can request tokens with grant_type=password to bypass the user consent screen, and disabled clients can redeem authorization codes using JWT client assertions."}],"id":"CVE-2026-126436","lastModified":"2026-11-13T10:17:50.620","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:50.510","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-qjj7-c4m9-6f92"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-oauth2-grant-type-enforcement-bypass-via-token-endpoint"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an authorization bypass vulnerability that allows OAuth2 clients to use unregistered grant types because oauth_clients.grant_types is never enforced. Attackers can request tokens with grant_type=password to bypass the user consent screen, and disabled clients can redeem authorization codes using JWT client assertions."}],"id":"CVE-2026-126436","lastModified":"2026-11-13T20:18:38.130","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126436","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T20:08:25.304937Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:50.510","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-qjj7-c4m9-6f92"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-oauth2-grant-type-enforcement-bypass-via-token-endpoint"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126440.json b/data/2026/CVE-2026-126440.json
index 470d6474b1..a9c8413fe5 100644
--- a/data/2026/CVE-2026-126440.json
+++ b/data/2026/CVE-2026-126440.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization flaw in the Care Coordination CCDA and CCR import controllers, which move a document named by the document_id parameter into the import category without checking access to the source document. Authenticated non-administrators with Care Coordination access can recategorize protected patient documents and then download them through normal ACL-checked retrieval."}],"id":"CVE-2026-126440","lastModified":"2026-11-13T10:17:51.270","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:51.150","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-mmpv-ph5x-x4m3"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-document-acl-bypass-via-care-coordination-import"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization flaw in the Care Coordination CCDA and CCR import controllers, which move a document named by the document_id parameter into the import category without checking access to the source document. Authenticated non-administrators with Care Coordination access can recategorize protected patient documents and then download them through normal ACL-checked retrieval."}],"id":"CVE-2026-126440","lastModified":"2026-11-13T20:18:39.257","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126440","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:26:15.114794Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:51.150","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-mmpv-ph5x-x4m3"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-document-acl-bypass-via-care-coordination-import"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-mmpv-ph5x-x4m3"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126444.json b/data/2026/CVE-2026-126444.json
index a447df355a..54ed473c07 100644
--- a/data/2026/CVE-2026-126444.json
+++ b/data/2026/CVE-2026-126444.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in the Ensora eRx integration that allows authenticated staff without patients/rx permission to access prescription data by directly requesting eRx.php. Attackers can expose selected patients' demographic, medication, and allergy data in the vendor XML and trigger eRx synchronization state changes."}],"id":"CVE-2026-126444","lastModified":"2026-11-13T10:17:51.953","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:51.830","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-mcr3-5rq6-9vvj"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-in-ensora-erx-via-erx-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in the Ensora eRx integration that allows authenticated staff without patients/rx permission to access prescription data by directly requesting eRx.php. Attackers can expose selected patients' demographic, medication, and allergy data in the vendor XML and trigger eRx synchronization state changes."}],"id":"CVE-2026-126444","lastModified":"2026-11-13T20:18:40.637","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126444","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:27:04.927789Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:51.830","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-mcr3-5rq6-9vvj"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-in-ensora-erx-via-erx-php"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-mcr3-5rq6-9vvj"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126448.json b/data/2026/CVE-2026-126448.json
index 0ef918309e..d52de424a3 100644
--- a/data/2026/CVE-2026-126448.json
+++ b/data/2026/CVE-2026-126448.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability that allows authenticated users lacking nationnotes/nn_configure to modify shared Nation Notes templates by calling mutation endpoints directly. Attackers can send requests to ajax_code.php or add_context.php, which lack ACL and CSRF checks, to tamper with clinical-note templates and assignments."}],"id":"CVE-2026-126448","lastModified":"2026-11-13T10:17:52.623","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:52.500","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-m4cw-vx96-p6fj"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-in-nation-notes-configuration-handlers"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability that allows authenticated users lacking nationnotes/nn_configure to modify shared Nation Notes templates by calling mutation endpoints directly. Attackers can send requests to ajax_code.php or add_context.php, which lack ACL and CSRF checks, to tamper with clinical-note templates and assignments."}],"id":"CVE-2026-126448","lastModified":"2026-11-13T20:18:41.963","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126448","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:27:49.565003Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:52.500","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-m4cw-vx96-p6fj"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-in-nation-notes-configuration-handlers"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-m4cw-vx96-p6fj"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126452.json b/data/2026/CVE-2026-126452.json
index d574bcc297..b98b3adfff 100644
--- a/data/2026/CVE-2026-126452.json
+++ b/data/2026/CVE-2026-126452.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in diagnosis_full.php that allows authenticated users to delete or clear any billing record by ID. Attackers can supply a target billing ID in the id parameter with delete or clear mode to deactivate other patients' charges and corrupt financial records."}],"id":"CVE-2026-126452","lastModified":"2026-11-13T10:17:53.303","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:53.190","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-r65f-fxf6-4fwr"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-via-diagnosis-full-php-billing-operations"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in diagnosis_full.php that allows authenticated users to delete or clear any billing record by ID. Attackers can supply a target billing ID in the id parameter with delete or clear mode to deactivate other patients' charges and corrupt financial records."}],"id":"CVE-2026-126452","lastModified":"2026-11-13T20:18:43.337","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126452","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:20:04.776877Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:53.190","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-r65f-fxf6-4fwr"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-via-diagnosis-full-php-billing-operations"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-r65f-fxf6-4fwr"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126456.json b/data/2026/CVE-2026-126456.json
index 5963d0c635..e3c55ec281 100644
--- a/data/2026/CVE-2026-126456.json
+++ b/data/2026/CVE-2026-126456.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability in the Fee Sheet notecodes field, which is escaped with the wrong context. Attackers with clinician access can inject a payload that breaks out of the single-quoted value attribute and executes in higher-privileged users' browsers."}],"id":"CVE-2026-126456","lastModified":"2026-11-13T10:17:53.953","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:53.833","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-ff55-qvf9-2fgm"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-stored-xss-via-fee-sheet-notecodes-field"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability in the Fee Sheet notecodes field, which is escaped with the wrong context. Attackers with clinician access can inject a payload that breaks out of the single-quoted value attribute and executes in higher-privileged users' browsers."}],"id":"CVE-2026-126456","lastModified":"2026-11-13T20:18:44.403","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126456","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:21:31.478827Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:53.833","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-ff55-qvf9-2fgm"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-stored-xss-via-fee-sheet-notecodes-field"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-ff55-qvf9-2fgm"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126461.json b/data/2026/CVE-2026-126461.json
index 941187ce25..36321bb5e1 100644
--- a/data/2026/CVE-2026-126461.json
+++ b/data/2026/CVE-2026-126461.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in library/ajax/user_settings.php that lets any authenticated user persist arbitrary global configuration overrides. Attackers can POST global:-prefixed keys to re-point external service hosts like CouchDB, eRx, phiMail, or SMTP to attacker-controlled servers, exfiltrating system credentials and patient PHI."}],"id":"CVE-2026-126461","lastModified":"2026-11-13T10:17:54.647","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:54.520","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-prmv-3m3j-9v7j"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-via-user-settings-php-global-override"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-918"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in library/ajax/user_settings.php that lets any authenticated user persist arbitrary global configuration overrides. Attackers can POST global:-prefixed keys to re-point external service hosts like CouchDB, eRx, phiMail, or SMTP to attacker-controlled servers, exfiltrating system credentials and patient PHI."}],"id":"CVE-2026-126461","lastModified":"2026-11-13T20:18:45.500","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126461","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:22:36.639406Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:54.520","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-prmv-3m3j-9v7j"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-via-user-settings-php-global-override"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-prmv-3m3j-9v7j"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-918"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126465.json b/data/2026/CVE-2026-126465.json
index 59a359c1a1..d983a947e1 100644
--- a/data/2026/CVE-2026-126465.json
+++ b/data/2026/CVE-2026-126465.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an SQL injection vulnerability in the patient portal api/onsiteactivityviews endpoint that allows any authenticated staff user to inject SQL through unquoted Id_BitwiseAnd Criteria values. Attackers can close the bitwise parenthesis and append OR or UNION SELECT clauses to read patient PHI, staff password hashes, MySQL authentication strings, and API tokens."}],"id":"CVE-2026-126465","lastModified":"2026-11-13T10:17:55.373","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:55.247","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-vvj8-xpx8-p293"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-sql-injection-via-onsiteactivityview-bitwiseand-criteria"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an SQL injection vulnerability in the patient portal api/onsiteactivityviews endpoint that allows any authenticated staff user to inject SQL through unquoted Id_BitwiseAnd Criteria values. Attackers can close the bitwise parenthesis and append OR or UNION SELECT clauses to read patient PHI, staff password hashes, MySQL authentication strings, and API tokens."}],"id":"CVE-2026-126465","lastModified":"2026-11-13T20:18:46.833","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126465","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:25:25.636004Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:55.247","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-vvj8-xpx8-p293"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-sql-injection-via-onsiteactivityview-bitwiseand-criteria"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-vvj8-xpx8-p293"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126469.json b/data/2026/CVE-2026-126469.json
index 7e095c5183..70a18c8559 100644
--- a/data/2026/CVE-2026-126469.json
+++ b/data/2026/CVE-2026-126469.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in several custom/ scripts that rely only on session authentication and never call AclMain::aclCheckCore(). Any authenticated low-privilege user can request export_labworks.php, chart_tracker.php, or export_registry_xml.php to disclose patient SSN, DOB, and insurance data or provider NPI/tax IDs, and forge chart-tracker records."}],"id":"CVE-2026-126469","lastModified":"2026-11-13T10:17:56.043","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:55.920","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-3h5w-672p-v4m9"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-in-custom-export-and-chart-tracker-scripts"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in several custom/ scripts that rely only on session authentication and never call AclMain::aclCheckCore(). Any authenticated low-privilege user can request export_labworks.php, chart_tracker.php, or export_registry_xml.php to disclose patient SSN, DOB, and insurance data or provider NPI/tax IDs, and forge chart-tracker records."}],"id":"CVE-2026-126469","lastModified":"2026-11-13T20:18:47.900","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126469","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:24:38.755590Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:55.920","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-3h5w-672p-v4m9"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-in-custom-export-and-chart-tracker-scripts"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-3h5w-672p-v4m9"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126473.json b/data/2026/CVE-2026-126473.json
index 27d3b66f2c..f6d5080d63 100644
--- a/data/2026/CVE-2026-126473.json
+++ b/data/2026/CVE-2026-126473.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.4.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.4.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.4.0 contains OAuth scope canonicalization and containment flaws that allow unauthenticated attackers to obtain unapproved system-level FHIR access. Attackers can register a colon-form system:Patient.read client that bypasses approval, then request unregistered system/Patient.write scope to read, modify, and create Patient records."}],"id":"CVE-2026-126473","lastModified":"2026-11-13T10:17:56.710","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:56.590","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-6xh3-fmm5-jjp4"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.4.0-oauth-authorization-bypass-via-scope-canonicalization"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.4.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.4.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.4.0 contains OAuth scope canonicalization and containment flaws that allow unauthenticated attackers to obtain unapproved system-level FHIR access. Attackers can register a colon-form system:Patient.read client that bypasses approval, then request unregistered system/Patient.write scope to read, modify, and create Patient records."}],"id":"CVE-2026-126473","lastModified":"2026-11-13T19:19:24.003","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126473","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:40:58.842309Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:56.590","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-6xh3-fmm5-jjp4"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.4.0-oauth-authorization-bypass-via-scope-canonicalization"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-6xh3-fmm5-jjp4"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126477.json b/data/2026/CVE-2026-126477.json
index bfb74b0c0f..b6df689a57 100644
--- a/data/2026/CVE-2026-126477.json
+++ b/data/2026/CVE-2026-126477.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability in the Eye Exam (eye_mag) module that allows administrators to inject JavaScript through unencoded Eye_defaults list option titles. Attackers can store a crafted title via edit_list.php that breaks out of a jQuery string in eye_base.php, executing script in any authenticated user's session when they click Defaults."}],"id":"CVE-2026-126477","lastModified":"2026-11-13T10:17:57.353","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":1.7,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":4.6,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:57.237","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-gr77-7xgh-5gwf"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-stored-xss-via-eye-exam-defaults-in-eye-base-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability in the Eye Exam (eye_mag) module that allows administrators to inject JavaScript through unencoded Eye_defaults list option titles. Attackers can store a crafted title via edit_list.php that breaks out of a jQuery string in eye_base.php, executing script in any authenticated user's session when they click Defaults."}],"id":"CVE-2026-126477","lastModified":"2026-11-13T19:19:24.133","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":1.7,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":4.6,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126477","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:47:57.513703Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:57.237","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-gr77-7xgh-5gwf"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-stored-xss-via-eye-exam-defaults-in-eye-base-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126481.json b/data/2026/CVE-2026-126481.json
index d9eaa5e02b..d6e7063db0 100644
--- a/data/2026/CVE-2026-126481.json
+++ b/data/2026/CVE-2026-126481.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a path traversal vulnerability in era_payments.php and sl_eob_search.php that allows authenticated billing users to write files outside the ERA directory. Attackers can embed traversal sequences in the GS04 element of an uploaded X12 835 file to overwrite .edi or .835 files with attacker-controlled content anywhere writable by the web server."}],"id":"CVE-2026-126481","lastModified":"2026-11-13T10:17:58.017","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:57.893","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-mf55-7h68-r2rp"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-path-traversal-via-era-835-file-upload"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a path traversal vulnerability in era_payments.php and sl_eob_search.php that allows authenticated billing users to write files outside the ERA directory. Attackers can embed traversal sequences in the GS04 element of an uploaded X12 835 file to overwrite .edi or .835 files with attacker-controlled content anywhere writable by the web server."}],"id":"CVE-2026-126481","lastModified":"2026-11-13T19:19:24.300","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126481","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:46:28.774834Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:57.893","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-mf55-7h68-r2rp"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-path-traversal-via-era-835-file-upload"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-mf55-7h68-r2rp"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126485.json b/data/2026/CVE-2026-126485.json
index 0d269265bb..d0ad1f9a78 100644
--- a/data/2026/CVE-2026-126485.json
+++ b/data/2026/CVE-2026-126485.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a cross-site request forgery vulnerability in ObservationController::deleteAction that allows attackers to delete observation form records without a CSRF token. Attackers can lure a logged-in clinician to a page issuing a GET to delete.php with guessed id values, soft-deleting observations in the victim's open encounter."}],"id":"CVE-2026-126485","lastModified":"2026-11-13T10:17:58.703","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:58.587","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-7gjr-359j-5q93"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-csrf-via-observation-form-delete-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-352"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a cross-site request forgery vulnerability in ObservationController::deleteAction that allows attackers to delete observation form records without a CSRF token. Attackers can lure a logged-in clinician to a page issuing a GET to delete.php with guessed id values, soft-deleting observations in the victim's open encounter."}],"id":"CVE-2026-126485","lastModified":"2026-11-13T19:19:24.450","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126485","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:45:01.002890Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:58.587","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-7gjr-359j-5q93"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-csrf-via-observation-form-delete-php"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/openemr/openemr/security/advisories/GHSA-7gjr-359j-5q93"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-352"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126486.json b/data/2026/CVE-2026-126486.json
index 78f6f2995e..1c3c24b194 100644
--- a/data/2026/CVE-2026-126486.json
+++ b/data/2026/CVE-2026-126486.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in portal/import_template.php, where several portal document template modes lack admin/forms ACL and CSRF checks. Any authenticated staff user can send mode=save_profiles to delete all template profile assignments, use other unguarded modes to push templates to patients or change categories, and read template bodies via mode=get or getPdf."}],"id":"CVE-2026-126486","lastModified":"2026-11-13T10:17:58.880","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.7,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:58.750","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-phvv-q7m7-8mc2"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-via-portal-import-template-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*","matchCriteriaId":"B162AE7E-F6D8-486B-848D-4B1F57798495","versionEndExcluding":"8.5.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a missing authorization vulnerability in portal/import_template.php, where several portal document template modes lack admin/forms ACL and CSRF checks. Any authenticated staff user can send mode=save_profiles to delete all template profile assignments, use other unguarded modes to push templates to patients or change categories, and read template bodies via mode=get or getPdf."}],"id":"CVE-2026-126486","lastModified":"2026-11-13T19:27:58.747","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.7,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:58.750","references":[{"source":"disclosure@vulncheck.com","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/openemr/openemr/security/advisories/GHSA-phvv-q7m7-8mc2"},{"source":"disclosure@vulncheck.com","tags":["Third Party Advisory"],"url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-via-portal-import-template-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-126487.json b/data/2026/CVE-2026-126487.json
index e5cde85181..7791f886a9 100644
--- a/data/2026/CVE-2026-126487.json
+++ b/data/2026/CVE-2026-126487.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an authorization bypass vulnerability that allows authenticated users to override system-wide global configuration values by storing global-prefixed keys through library/ajax/user_settings.php. Attackers can submit lab or target parameters with global: prefixed setting names to disable audit logging, weaken password policies, or alter security-sensitive settings persistently for their sessions."}],"id":"CVE-2026-126487","lastModified":"2026-11-13T10:17:59.043","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:58.923","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-v997-jphq-wvvr"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-global-configuration-override-via-user-settings-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*","matchCriteriaId":"B162AE7E-F6D8-486B-848D-4B1F57798495","versionEndExcluding":"8.5.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an authorization bypass vulnerability that allows authenticated users to override system-wide global configuration values by storing global-prefixed keys through library/ajax/user_settings.php. Attackers can submit lab or target parameters with global: prefixed setting names to disable audit logging, weaken password policies, or alter security-sensitive settings persistently for their sessions."}],"id":"CVE-2026-126487","lastModified":"2026-11-13T19:29:51.290","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:58.923","references":[{"source":"disclosure@vulncheck.com","tags":["Exploit","Mitigation","Vendor Advisory"],"url":"https://github.com/openemr/openemr/security/advisories/GHSA-v997-jphq-wvvr"},{"source":"disclosure@vulncheck.com","tags":["Third Party Advisory"],"url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-global-configuration-override-via-user-settings-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-126488.json b/data/2026/CVE-2026-126488.json
index 26247abd70..482b0f283a 100644
--- a/data/2026/CVE-2026-126488.json
+++ b/data/2026/CVE-2026-126488.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an SQL injection vulnerability in the patient portal OnsiteDocument.Query endpoint, where mass-assigned _BitwiseAnd criteria parameters are placed unquoted into SQL with only quote-character escaping. Authenticated portal patients can inject SQL outside their per-patient scope to read the entire database, including other patients' demographics and users_secure password hashes."}],"id":"CVE-2026-126488","lastModified":"2026-11-13T16:18:44.287","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":4.0,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.3,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126488","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T15:29:43.032061Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:59.087","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-g2xw-rvhq-x543"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-sql-injection-via-onsitedocument-query-bitwiseand"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*","matchCriteriaId":"B162AE7E-F6D8-486B-848D-4B1F57798495","versionEndExcluding":"8.5.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains an SQL injection vulnerability in the patient portal OnsiteDocument.Query endpoint, where mass-assigned _BitwiseAnd criteria parameters are placed unquoted into SQL with only quote-character escaping. Authenticated portal patients can inject SQL outside their per-patient scope to read the entire database, including other patients' demographics and users_secure password hashes."}],"id":"CVE-2026-126488","lastModified":"2026-11-13T19:42:48.427","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":4.0,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.3,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126488","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T15:29:43.032061Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:59.087","references":[{"source":"disclosure@vulncheck.com","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/openemr/openemr/security/advisories/GHSA-g2xw-rvhq-x543"},{"source":"disclosure@vulncheck.com","tags":["Third Party Advisory"],"url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-sql-injection-via-onsitedocument-query-bitwiseand"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126489.json b/data/2026/CVE-2026-126489.json
index edc085e751..b5c11d5b15 100644
--- a/data/2026/CVE-2026-126489.json
+++ b/data/2026/CVE-2026-126489.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a second-order SQL injection vulnerability in the IPPF contraceptive issue feature because issue_ippf_con_save concatenates layout_options field_id values into a REPLACE INTO query as column names. Authenticated administrators can add a malicious field_id via edit_layout.php, then trigger issue_ippf_con_save through add_edit_issue.php to execute arbitrary SQL."}],"id":"CVE-2026-126489","lastModified":"2026-11-13T10:17:59.373","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:59.250","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-8j6v-q545-q9q7"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-sql-injection-via-ippf-contraceptive-issue-feature"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*","matchCriteriaId":"B162AE7E-F6D8-486B-848D-4B1F57798495","versionEndExcluding":"8.5.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a second-order SQL injection vulnerability in the IPPF contraceptive issue feature because issue_ippf_con_save concatenates layout_options field_id values into a REPLACE INTO query as column names. Authenticated administrators can add a malicious field_id via edit_layout.php, then trigger issue_ippf_con_save through add_edit_issue.php to execute arbitrary SQL."}],"id":"CVE-2026-126489","lastModified":"2026-11-13T19:41:57.590","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126489","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:43:51.564255Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:59.250","references":[{"source":"disclosure@vulncheck.com","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/openemr/openemr/security/advisories/GHSA-8j6v-q545-q9q7"},{"source":"disclosure@vulncheck.com","tags":["Third Party Advisory"],"url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-sql-injection-via-ippf-contraceptive-issue-feature"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/openemr/openemr/security/advisories/GHSA-8j6v-q545-q9q7"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126490.json b/data/2026/CVE-2026-126490.json
index dc9be2a1c9..ec0dc6a360 100644
--- a/data/2026/CVE-2026-126490.json
+++ b/data/2026/CVE-2026-126490.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains active debug code in interface/fax/fax_view.php that executes passthru(\"groups\") and discloses the web server's Unix group memberships. Authenticated attackers with fax module access can supply a nonexistent jid value to reveal groups such as adm or shadow, aiding privilege escalation planning."}],"id":"CVE-2026-126490","lastModified":"2026-11-13T10:17:59.543","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:59.423","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-wc2f-fvpv-c32r"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-information-disclosure-via-debug-code-in-fax-view-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*","matchCriteriaId":"B162AE7E-F6D8-486B-848D-4B1F57798495","versionEndExcluding":"8.5.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains active debug code in interface/fax/fax_view.php that executes passthru(\"groups\") and discloses the web server's Unix group memberships. Authenticated attackers with fax module access can supply a nonexistent jid value to reveal groups such as adm or shadow, aiding privilege escalation planning."}],"id":"CVE-2026-126490","lastModified":"2026-11-13T19:41:20.437","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:59.423","references":[{"source":"disclosure@vulncheck.com","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/openemr/openemr/security/advisories/GHSA-wc2f-fvpv-c32r"},{"source":"disclosure@vulncheck.com","tags":["Third Party Advisory"],"url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-information-disclosure-via-debug-code-in-fax-view-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-126491.json b/data/2026/CVE-2026-126491.json
index bf2adfc694..66bc148388 100644
--- a/data/2026/CVE-2026-126491.json
+++ b/data/2026/CVE-2026-126491.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a stored SQL injection vulnerability in getByPatientDemographics() where layout_options field_id values are concatenated into the patient search WHERE clause. Attackers with Layout Editor access can plant a malicious field_id, allowing any authenticated low-privilege user to exfiltrate data from patient_data and users_secure tables."}],"id":"CVE-2026-126491","lastModified":"2026-11-13T10:17:59.720","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":4.7,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.3,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:59.600","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-pc2q-9pcw-v899"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-sql-injection-via-getbypatientdemographics-in-patient-inc-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*","matchCriteriaId":"B162AE7E-F6D8-486B-848D-4B1F57798495","versionEndExcluding":"8.5.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a stored SQL injection vulnerability in getByPatientDemographics() where layout_options field_id values are concatenated into the patient search WHERE clause. Attackers with Layout Editor access can plant a malicious field_id, allowing any authenticated low-privilege user to exfiltrate data from patient_data and users_secure tables."}],"id":"CVE-2026-126491","lastModified":"2026-11-13T19:39:18.380","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":4.7,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.3,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:59.600","references":[{"source":"disclosure@vulncheck.com","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/openemr/openemr/security/advisories/GHSA-pc2q-9pcw-v899"},{"source":"disclosure@vulncheck.com","tags":["Third Party Advisory"],"url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-sql-injection-via-getbypatientdemographics-in-patient-inc-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-126492.json b/data/2026/CVE-2026-126492.json
index c3142eb4dc..45d85b197e 100644
--- a/data/2026/CVE-2026-126492.json
+++ b/data/2026/CVE-2026-126492.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a second-order sql injection vulnerability that allows low-privileged authenticated users to store malicious SQL via library/ajax/addlistitem.php. Attackers can persist a SQL fragment in the recent_patient_columns option_id value, which dynamic_finder.php concatenates into a SELECT query and executes as SQL."}],"id":"CVE-2026-126492","lastModified":"2026-11-13T16:18:45.297","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126492","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T15:29:40.673448Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:59.763","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-hrf6-qx6w-vgh9"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-second-order-sql-injection-via-dynamic-finder-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*","matchCriteriaId":"B162AE7E-F6D8-486B-848D-4B1F57798495","versionEndExcluding":"8.5.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a second-order sql injection vulnerability that allows low-privileged authenticated users to store malicious SQL via library/ajax/addlistitem.php. Attackers can persist a SQL fragment in the recent_patient_columns option_id value, which dynamic_finder.php concatenates into a SELECT query and executes as SQL."}],"id":"CVE-2026-126492","lastModified":"2026-11-13T19:34:36.513","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126492","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T15:29:40.673448Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:59.763","references":[{"source":"disclosure@vulncheck.com","tags":["Vendor Advisory"],"url":"https://github.com/openemr/openemr/security/advisories/GHSA-hrf6-qx6w-vgh9"},{"source":"disclosure@vulncheck.com","tags":["Third Party Advisory"],"url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-second-order-sql-injection-via-dynamic-finder-php"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126493.json b/data/2026/CVE-2026-126493.json
index 1a1f9f755d..478eeb9374 100644
--- a/data/2026/CVE-2026-126493.json
+++ b/data/2026/CVE-2026-126493.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability that allows low-privileged patient portal users to inject JavaScript via the tableArgs field of the onsiteportalactivity API. Attackers can store a payload with spaces that breaks out of an unquoted data-delete-id attribute, executing script when providers click the delete button on the audit review page."}],"id":"CVE-2026-126493","lastModified":"2026-11-13T10:18:00.053","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:17:59.930","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/openemr/openemr/security/advisories/GHSA-r4hm-frcj-qr39"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-stored-xss-via-onsiteportalactivity-tableargs"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"openemr","vendor":"openemr","versions":[{"lessThan":"8.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"8.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*","matchCriteriaId":"B162AE7E-F6D8-486B-848D-4B1F57798495","versionEndExcluding":"8.5.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability that allows low-privileged patient portal users to inject JavaScript via the tableArgs field of the onsiteportalactivity API. Attackers can store a payload with spaces that breaks out of an unquoted data-delete-id attribute, executing script when providers click the delete button on the audit review page."}],"id":"CVE-2026-126493","lastModified":"2026-11-13T20:18:49.007","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126493","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:23:48.314092Z","version":"2.0.3"}}]},"published":"2026-11-13T10:17:59.930","references":[{"source":"disclosure@vulncheck.com","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/openemr/openemr/security/advisories/GHSA-r4hm-frcj-qr39"},{"source":"disclosure@vulncheck.com","tags":["Third Party Advisory"],"url":"https://www.vulncheck.com/advisories/openemr-before-8.5.0-stored-xss-via-onsiteportalactivity-tableargs"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/openemr/openemr/security/advisories/GHSA-r4hm-frcj-qr39"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126644.json b/data/2026/CVE-2026-126644.json
index 473bc12742..3e0a6b213c 100644
--- a/data/2026/CVE-2026-126644.json
+++ b/data/2026/CVE-2026-126644.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"rhc-worker-playbook","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"rhc-worker-playbook","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A link-following flaw was found in the authorized_key module of the ansible.posix collection, residual to the fix for CVE-2026-11837. That fix guards only the final path component (os.chown with follow_symlinks=False and O_NOFOLLOW in _safe_open_write()). When an unprivileged local user replaces their ~/.ssh directory with a symlink to a directory they do not own, and an operator subsequently runs the authorized_key task as root (a common provisioning pattern), the module resolves its path operations through the symlink: atomic_move() writes the temporary file in the symlink target and renames it to <target>/authorized_keys, creating or overwriting a file in the attacker-chosen directory, and os.chmod(sshdir, 0o700) follows the symlink and changes the target directory's permissions. The written file is chowned to the unprivileged user, so this is not a privilege escalation, but it allows an attacker to create or overwrite files (for example in /etc/apt/apt.conf.d/, which APT reads regardless of file ownership) to cause integrity and availability impacts."}],"id":"CVE-2026-126644","lastModified":"2026-11-12T11:17:11.920","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":3.9,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.3,"impactScore":2.5,"source":"secalert@redhat.com","type":"Primary"}]},"published":"2026-11-12T11:17:11.770","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-126644"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2571732"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-59"}],"source":"secalert@redhat.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"rhc-worker-playbook","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"rhc-worker-playbook","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A link-following flaw was found in the authorized_key module of the ansible.posix collection, residual to the fix for CVE-2026-11837. That fix guards only the final path component (os.chown with follow_symlinks=False and O_NOFOLLOW in _safe_open_write()). When an unprivileged local user replaces their ~/.ssh directory with a symlink to a directory they do not own, and an operator subsequently runs the authorized_key task as root (a common provisioning pattern), the module resolves its path operations through the symlink: atomic_move() writes the temporary file in the symlink target and renames it to <target>/authorized_keys, creating or overwriting a file in the attacker-chosen directory, and os.chmod(sshdir, 0o700) follows the symlink and changes the target directory's permissions. The written file is chowned to the unprivileged user, so this is not a privilege escalation, but it allows an attacker to create or overwrite files (for example in /etc/apt/apt.conf.d/, which APT reads regardless of file ownership) to cause integrity and availability impacts."}],"id":"CVE-2026-126644","lastModified":"2026-11-13T19:19:24.793","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":3.9,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.3,"impactScore":2.5,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126644","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:33:07.048496Z","version":"2.0.3"}}]},"published":"2026-11-12T11:17:11.770","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-126644"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2571732"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-59"}],"source":"secalert@redhat.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126758.json b/data/2026/CVE-2026-126758.json
index 373bb0a414..aa70f81f3c 100644
--- a/data/2026/CVE-2026-126758.json
+++ b/data/2026/CVE-2026-126758.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:moonshot_ai:kimi_code:*:*:*:*:*:*:*:*"],"modules":["WorkspaceDirsService"],"product":"Kimi Code","vendor":"Moonshot AI","versions":[{"status":"affected","version":"2.0.0"},{"status":"affected","version":"2.0.1"},{"status":"affected","version":"2.0.2"},{"status":"unaffected","version":"2.1.0"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additional_dir results in reliance on untrusted inputs in a security decision. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 2.1.0 is able to resolve this issue. Upgrading the affected component is recommended."}],"id":"CVE-2026-126758","lastModified":"2026-11-11T23:17:11.500","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":3.2,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:L/Au:S/C:N/I:P/A:P","version":"2.0"},"exploitabilityScore":3.1,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.8,"impactScore":2.5,"source":"cna@vuldb.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":1.9,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}]},"published":"2026-11-11T23:17:11.320","references":[{"source":"cna@vuldb.com","url":"https://github.com/MoonshotAI/kimi-code/releases/tag/%40moonshot-ai%2Fkimi-code%402.1.0"},{"source":"cna@vuldb.com","url":"https://mcniyfj5bw9b.feishu.cn/docx/LsJldjpjXomkb4xTJ6CcWzdFnvd"},{"source":"cna@vuldb.com","url":"https://vuldb.com/cve/CVE-2026-126758"},{"source":"cna@vuldb.com","url":"https://vuldb.com/submit/1033260"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/435868"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/435868/cti"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-807"}],"source":"cna@vuldb.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:moonshot_ai:kimi_code:*:*:*:*:*:*:*:*"],"modules":["WorkspaceDirsService"],"product":"Kimi Code","vendor":"Moonshot AI","versions":[{"status":"affected","version":"2.0.0"},{"status":"affected","version":"2.0.1"},{"status":"affected","version":"2.0.2"},{"status":"unaffected","version":"2.1.0"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additional_dir results in reliance on untrusted inputs in a security decision. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 2.1.0 is able to resolve this issue. Upgrading the affected component is recommended."}],"id":"CVE-2026-126758","lastModified":"2026-11-13T19:19:24.910","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":3.2,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:L/Au:S/C:N/I:P/A:P","version":"2.0"},"exploitabilityScore":3.1,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.8,"impactScore":2.5,"source":"cna@vuldb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":1.9,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126758","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:30:55.379705Z","version":"2.0.3"}}]},"published":"2026-11-11T23:17:11.320","references":[{"source":"cna@vuldb.com","url":"https://github.com/MoonshotAI/kimi-code/releases/tag/%40moonshot-ai%2Fkimi-code%402.1.0"},{"source":"cna@vuldb.com","url":"https://mcniyfj5bw9b.feishu.cn/docx/LsJldjpjXomkb4xTJ6CcWzdFnvd"},{"source":"cna@vuldb.com","url":"https://vuldb.com/cve/CVE-2026-126758"},{"source":"cna@vuldb.com","url":"https://vuldb.com/submit/1033260"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/435868"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/435868/cti"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-807"}],"source":"cna@vuldb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126837.json b/data/2026/CVE-2026-126837.json
index 247b39fabb..b2bc64a9ee 100644
--- a/data/2026/CVE-2026-126837.json
+++ b/data/2026/CVE-2026-126837.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Node.js Driver","vendor":"MongoDB","versions":[{"lessThan":"7.8.0","status":"affected","version":"3.3.3","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A validation flaw in the DNS SRV host discovery of the MongoDB Node.js driver may cause the driver to connect to a host outside the expected domain. For a mongodb+srv:// connection string, the driver checks each host name in the DNS SRV response against the domain of the connection string. The driver then builds the connection address from the original name, in which certain characters end the host name early. An unauthenticated party who can forge or change the DNS SRV response may redirect the connection to a host of their choice. TLS does not prevent this, because the driver verifies the server certificate against the redirected host name. This may result in unintended disclosure of application data and authentication credentials, and in altered query results. Applications that use mongodb:// connection strings are not affected."}],"id":"CVE-2026-126837","lastModified":"2026-11-12T22:09:39.233","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}]},"published":"2026-11-12T17:17:33.320","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/NODE-7830"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-180"}],"source":"cna@mongodb.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Node.js Driver","vendor":"MongoDB","versions":[{"lessThan":"7.8.0","status":"affected","version":"3.3.3","versionType":"semver"}]}],"source":"cna@mongodb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A validation flaw in the DNS SRV host discovery of the MongoDB Node.js driver may cause the driver to connect to a host outside the expected domain. For a mongodb+srv:// connection string, the driver checks each host name in the DNS SRV response against the domain of the connection string. The driver then builds the connection address from the original name, in which certain characters end the host name early. An unauthenticated party who can forge or change the DNS SRV response may redirect the connection to a host of their choice. TLS does not prevent this, because the driver verifies the server certificate against the redirected host name. This may result in unintended disclosure of application data and authentication credentials, and in altered query results. Applications that use mongodb:// connection strings are not affected."}],"id":"CVE-2026-126837","lastModified":"2026-11-13T19:19:25.070","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"cna@mongodb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@mongodb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126837","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:55:42.855460Z","version":"2.0.3"}}]},"published":"2026-11-12T17:17:33.320","references":[{"source":"cna@mongodb.com","url":"https://jira.mongodb.org/browse/NODE-7830"}],"sourceIdentifier":"cna@mongodb.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-180"}],"source":"cna@mongodb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126935.json b/data/2026/CVE-2026-126935.json
index dfba3c070f..198ab86a66 100644
--- a/data/2026/CVE-2026-126935.json
+++ b/data/2026/CVE-2026-126935.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/diced/zipline","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.8.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.8.0 contains a race condition vulnerability in src/server/routes/raw/[id].ts that allows remote attackers to bypass file maxViews limits through non-atomic view counting. Attackers holding a file link can send parallel requests that read the same pre-increment count, viewing view-limited or delete-on-max-views files beyond their limit."}],"id":"CVE-2026-126935","lastModified":"2026-11-12T21:36:06.743","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-11T23:17:23.427","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/blob/v4.7.0/src/server/routes/raw/%5Bid%5D.ts#L101-L133"},{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/commit/1770479d6795ea8700f0ce6ba08a1654d3644c73"},{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/releases/tag/v4.8.0"},{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-7xv9-wr46-j578"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.8.0-maxviews-limit-bypass-via-race-condition"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-367"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/diced/zipline","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.8.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.8.0 contains a race condition vulnerability in src/server/routes/raw/[id].ts that allows remote attackers to bypass file maxViews limits through non-atomic view counting. Attackers holding a file link can send parallel requests that read the same pre-increment count, viewing view-limited or delete-on-max-views files beyond their limit."}],"id":"CVE-2026-126935","lastModified":"2026-11-13T19:19:25.213","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126935","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:28:15.881416Z","version":"2.0.3"}}]},"published":"2026-11-11T23:17:23.427","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/blob/v4.7.0/src/server/routes/raw/%5Bid%5D.ts#L101-L133"},{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/commit/1770479d6795ea8700f0ce6ba08a1654d3644c73"},{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/releases/tag/v4.8.0"},{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-7xv9-wr46-j578"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.8.0-maxviews-limit-bypass-via-race-condition"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/diced/zipline/security/advisories/GHSA-7xv9-wr46-j578"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-367"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126938.json b/data/2026/CVE-2026-126938.json
index c68b3b71ea..365fc0363c 100644
--- a/data/2026/CVE-2026-126938.json
+++ b/data/2026/CVE-2026-126938.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.6.4","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.6.4","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.6.4 contains a resource allocation vulnerability that allows authenticated users to bypass chunked-upload size and quota checks by forging Content-Range offsets and totals. Attackers can send tiny chunks to the partial upload endpoint with large declared offsets, causing the server to create oversized files and exhaust disk space."}],"id":"CVE-2026-126938","lastModified":"2026-11-13T10:18:00.573","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:00.573","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-fp8p-hf8g-fw65"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.6.4-upload-quota-bypass-via-forged-content-range-headers"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.6.4","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.6.4","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.6.4 contains a resource allocation vulnerability that allows authenticated users to bypass chunked-upload size and quota checks by forging Content-Range offsets and totals. Attackers can send tiny chunks to the partial upload endpoint with large declared offsets, causing the server to create oversized files and exhaust disk space."}],"id":"CVE-2026-126938","lastModified":"2026-11-13T19:19:26.563","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126938","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:42:11.213094Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:00.573","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-fp8p-hf8g-fw65"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.6.4-upload-quota-bypass-via-forged-content-range-headers"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/diced/zipline/security/advisories/GHSA-fp8p-hf8g-fw65"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-770"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126942.json b/data/2026/CVE-2026-126942.json
index 24bb92d9e9..5c93f9caa7 100644
--- a/data/2026/CVE-2026-126942.json
+++ b/data/2026/CVE-2026-126942.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:npm/zipline","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.6.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.6.2","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.6.2 contains a missing authorization vulnerability in POST /api/user/folders that allows authenticated users to reparent other users' files by supplying their file IDs. Attackers can harvest file IDs from public folders and create a folder seeded with them, disclosing victims' file URLs and removing those files from their folder views."}],"id":"CVE-2026-126942","lastModified":"2026-11-13T10:18:01.170","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:01.170","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-84c9-r2mj-p9pp"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.6.2-missing-authorization-via-post-api-user-folders"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:npm/zipline","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.6.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.6.2","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.6.2 contains a missing authorization vulnerability in POST /api/user/folders that allows authenticated users to reparent other users' files by supplying their file IDs. Attackers can harvest file IDs from public folders and create a folder seeded with them, disclosing victims' file URLs and removing those files from their folder views."}],"id":"CVE-2026-126942","lastModified":"2026-11-13T19:19:26.683","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126942","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:27:23.067249Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:01.170","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-84c9-r2mj-p9pp"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.6.2-missing-authorization-via-post-api-user-folders"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/diced/zipline/security/advisories/GHSA-84c9-r2mj-p9pp"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126946.json b/data/2026/CVE-2026-126946.json
index a7e5a9549f..8dae28ca4f 100644
--- a/data/2026/CVE-2026-126946.json
+++ b/data/2026/CVE-2026-126946.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.5.0","status":"affected","version":"4.3.0","versionType":"semver"},{"status":"unaffected","version":"4.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline from 4.3.0 before 4.5.0 contains a stored cross-site scripting vulnerability that allows authenticated low-privilege users to inject HTML through unescaped embed settings in SSR meta tags. Attackers can set malicious embedTitle, embedDescription, embedSiteName, or embedColor values via PATCH /api/user to execute JavaScript in browsers of visitors opening their file view pages."}],"id":"CVE-2026-126946","lastModified":"2026-11-13T15:45:24.843","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:01.747","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-9j96-vvqc-h9f8"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-4.3.0-before-4.5.0-stored-xss-via-ssr-embed-meta-tags"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.5.0","status":"affected","version":"4.3.0","versionType":"semver"},{"status":"unaffected","version":"4.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline from 4.3.0 before 4.5.0 contains a stored cross-site scripting vulnerability that allows authenticated low-privilege users to inject HTML through unescaped embed settings in SSR meta tags. Attackers can set malicious embedTitle, embedDescription, embedSiteName, or embedColor values via PATCH /api/user to execute JavaScript in browsers of visitors opening their file view pages."}],"id":"CVE-2026-126946","lastModified":"2026-11-13T19:19:26.820","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126946","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:39:20.284165Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:01.747","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-9j96-vvqc-h9f8"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-4.3.0-before-4.5.0-stored-xss-via-ssr-embed-meta-tags"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/diced/zipline/security/advisories/GHSA-9j96-vvqc-h9f8"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126948.json b/data/2026/CVE-2026-126948.json
index 48a4cd3b55..0e42e12990 100644
--- a/data/2026/CVE-2026-126948.json
+++ b/data/2026/CVE-2026-126948.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:npm/zipline","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.5.0 contains an insecure direct object reference vulnerability caused by missing ownership verification in the PATCH and DELETE handlers for /api/user/folders/:id. Authenticated attackers can supply another user's folder ID to rename it, make it public, enable uploads, or delete it."}],"id":"CVE-2026-126948","lastModified":"2026-11-13T15:45:24.843","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:02.047","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-fgwh-2pc5-wr73"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.5.0-idor-via-folder-patch-and-delete-endpoints"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:npm/zipline","product":"zipline","vendor":"diced","versions":[{"lessThan":"4.5.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.5.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline before 4.5.0 contains an insecure direct object reference vulnerability caused by missing ownership verification in the PATCH and DELETE handlers for /api/user/folders/:id. Authenticated attackers can supply another user's folder ID to rename it, make it public, enable uploads, or delete it."}],"id":"CVE-2026-126948","lastModified":"2026-11-13T19:19:26.960","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126948","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:37:53.666689Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:02.047","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-fgwh-2pc5-wr73"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-before-4.5.0-idor-via-folder-patch-and-delete-endpoints"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/diced/zipline/security/advisories/GHSA-fgwh-2pc5-wr73"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126952.json b/data/2026/CVE-2026-126952.json
index 10c6f6445b..aad89b3702 100644
--- a/data/2026/CVE-2026-126952.json
+++ b/data/2026/CVE-2026-126952.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced","versions":[{"lessThanOrEqual":"4.4.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline through 4.4.0 contains an authentication bypass vulnerability in the WebAuthn login endpoint that creates sessions for a supplied registered credential ID without verifying the assertion. Attackers who obtain a target's passkey credential ID can impersonate that account without its authenticator, potentially gaining administrative control over SUPERADMIN accounts."}],"id":"CVE-2026-126952","lastModified":"2026-11-13T15:45:24.843","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.2,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:02.590","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-8g3f-425r-35rq"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-through-4.4.0-webauthn-authentication-bypass-via-passkey-login"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-347"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"zipline","vendor":"diced","versions":[{"lessThanOrEqual":"4.4.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zipline through 4.4.0 contains an authentication bypass vulnerability in the WebAuthn login endpoint that creates sessions for a supplied registered credential ID without verifying the assertion. Attackers who obtain a target's passkey credential ID can impersonate that account without its authenticator, potentially gaining administrative control over SUPERADMIN accounts."}],"id":"CVE-2026-126952","lastModified":"2026-11-13T19:19:27.113","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.2,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126952","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:35:46.273471Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:02.590","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/diced/zipline/security/advisories/GHSA-8g3f-425r-35rq"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/zipline-through-4.4.0-webauthn-authentication-bypass-via-passkey-login"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/diced/zipline/security/advisories/GHSA-8g3f-425r-35rq"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-347"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126993.json b/data/2026/CVE-2026-126993.json
index e2bc09dbc3..137e8e201c 100644
--- a/data/2026/CVE-2026-126993.json
+++ b/data/2026/CVE-2026-126993.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:sscms:sscms:*:*:*:*:*:*:*:*"],"product":"SSCMS","vendor":"SiteServer","versions":[{"status":"affected","version":"7.2.0"},{"status":"affected","version":"7.2.1"},{"status":"affected","version":"7.2.2"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A security flaw has been discovered in SiteServer SSCMS up to 7.2.2. Impacted is an unknown function of the file /api/v1/captcha. Performing a manipulation of the argument Value results in inadequate encryption strength. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}],"id":"CVE-2026-126993","lastModified":"2026-11-12T13:17:15.640","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":4.3,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"cna@vuldb.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}]},"published":"2026-11-12T13:17:15.460","references":[{"source":"cna@vuldb.com","url":"https://vuldb.com/cve/CVE-2026-126993"},{"source":"cna@vuldb.com","url":"https://vuldb.com/submit/1040543"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/436288"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/436288/cti"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-310"},{"lang":"en","value":"CWE-326"}],"source":"cna@vuldb.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:sscms:sscms:*:*:*:*:*:*:*:*"],"product":"SSCMS","vendor":"SiteServer","versions":[{"status":"affected","version":"7.2.0"},{"status":"affected","version":"7.2.1"},{"status":"affected","version":"7.2.2"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A security flaw has been discovered in SiteServer SSCMS up to 7.2.2. Impacted is an unknown function of the file /api/v1/captcha. Performing a manipulation of the argument Value results in inadequate encryption strength. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}],"id":"CVE-2026-126993","lastModified":"2026-11-13T19:19:27.260","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":4.3,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"cna@vuldb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126993","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:36:47.864095Z","version":"2.0.3"}}]},"published":"2026-11-12T13:17:15.460","references":[{"source":"cna@vuldb.com","url":"https://vuldb.com/cve/CVE-2026-126993"},{"source":"cna@vuldb.com","url":"https://vuldb.com/submit/1040543"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/436288"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/436288/cti"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-310"},{"lang":"en","value":"CWE-326"}],"source":"cna@vuldb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-126997.json b/data/2026/CVE-2026-126997.json
index 5c82deecb3..db4d6aea7d 100644
--- a/data/2026/CVE-2026-126997.json
+++ b/data/2026/CVE-2026-126997.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:jeecgboot:jeecgboot:*:*:*:*:*:*:*:*"],"modules":["flow-run Endpoint"],"product":"JeecgBoot","vendor":"n/a","versions":[{"status":"affected","version":"3.9.0"},{"status":"affected","version":"3.9.1"},{"status":"affected","version":"3.9.2"},{"status":"affected","version":"3.9.3"},{"status":"affected","version":"3.9.4"},{"status":"affected","version":"3.9.5"},{"status":"affected","version":"3.9.6"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was identified in JeecgBoot up to 3.9.6. This affects the function RestTemplate.exchange of the file org/jeecg/modules/airag/flow/c/a.class of the component flow-run Endpoint. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"id":"CVE-2026-126997","lastModified":"2026-11-12T15:17:49.437","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.4,"source":"cna@vuldb.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}]},"published":"2026-11-12T15:17:49.220","references":[{"source":"cna@vuldb.com","url":"https://github.com/dingpotian/cve-vul/blob/main/jeecgboot/advisory-01-airag-flow-ssrf.md"},{"source":"cna@vuldb.com","url":"https://vuldb.com/cve/CVE-2026-126997"},{"source":"cna@vuldb.com","url":"https://vuldb.com/submit/1040927"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/436296"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/436296/cti"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-918"}],"source":"cna@vuldb.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:jeecgboot:jeecgboot:*:*:*:*:*:*:*:*"],"modules":["flow-run Endpoint"],"product":"JeecgBoot","vendor":"n/a","versions":[{"status":"affected","version":"3.9.0"},{"status":"affected","version":"3.9.1"},{"status":"affected","version":"3.9.2"},{"status":"affected","version":"3.9.3"},{"status":"affected","version":"3.9.4"},{"status":"affected","version":"3.9.5"},{"status":"affected","version":"3.9.6"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was identified in JeecgBoot up to 3.9.6. This affects the function RestTemplate.exchange of the file org/jeecg/modules/airag/flow/c/a.class of the component flow-run Endpoint. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"id":"CVE-2026-126997","lastModified":"2026-11-13T19:19:27.437","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.4,"source":"cna@vuldb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-126997","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:37:57.522507Z","version":"2.0.3"}}]},"published":"2026-11-12T15:17:49.220","references":[{"source":"cna@vuldb.com","url":"https://github.com/dingpotian/cve-vul/blob/main/jeecgboot/advisory-01-airag-flow-ssrf.md"},{"source":"cna@vuldb.com","url":"https://vuldb.com/cve/CVE-2026-126997"},{"source":"cna@vuldb.com","url":"https://vuldb.com/submit/1040927"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/436296"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/436296/cti"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-918"}],"source":"cna@vuldb.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127058.json b/data/2026/CVE-2026-127058.json
index 1e69a1d1d4..21cf8dd71a 100644
--- a/data/2026/CVE-2026-127058.json
+++ b/data/2026/CVE-2026-127058.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/WonderCMS/wondercms","product":"wondercms","repo":"https://github.com/WonderCMS/wondercms","vendor":"WonderCMS","versions":[{"lessThan":"3.7.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"WonderCMS before 3.7.0 contains an unverified password change vulnerability in the saveAction functionality that allows an authenticated attacker to change the administrator password without re-authentication. Attackers can exploit this missing re-verification check during password changes to bypass re-authentication controls and maintain or escalate unauthorized access to the administrative account."}],"id":"CVE-2026-127058","lastModified":"2026-11-12T21:36:06.743","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-12T14:17:29.310","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/WonderCMS/wondercms/releases#release-3.7.0"},{"source":"disclosure@vulncheck.com","url":"https://github.com/WonderCMS/wondercms/security/advisories/GHSA-qc3r-v7fc-24xc"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/wondercms-before-unverified-password-change-via-saveaction"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-620"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/WonderCMS/wondercms","product":"wondercms","repo":"https://github.com/WonderCMS/wondercms","vendor":"WonderCMS","versions":[{"lessThan":"3.7.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"WonderCMS before 3.7.0 contains an unverified password change vulnerability in the saveAction functionality that allows an authenticated attacker to change the administrator password without re-authentication. Attackers can exploit this missing re-verification check during password changes to bypass re-authentication controls and maintain or escalate unauthorized access to the administrative account."}],"id":"CVE-2026-127058","lastModified":"2026-11-13T19:19:27.617","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127058","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:48:27.365350Z","version":"2.0.3"}}]},"published":"2026-11-12T14:17:29.310","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/WonderCMS/wondercms/releases#release-3.7.0"},{"source":"disclosure@vulncheck.com","url":"https://github.com/WonderCMS/wondercms/security/advisories/GHSA-qc3r-v7fc-24xc"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/wondercms-before-unverified-password-change-via-saveaction"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-620"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127073.json b/data/2026/CVE-2026-127073.json
index 7834a09981..43d793a703 100644
--- a/data/2026/CVE-2026-127073.json
+++ b/data/2026/CVE-2026-127073.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"BuildPiper","vendor":"OpsTree Solutions","versions":[{"lessThan":"2.7.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpsTree BuildPiper before 2.7.0 contains a privilege escalation vulnerability that allows project users to gain Kubernetes cluster-admin rights by submitting unrestricted manifests through the Additional Manifest feature. Attackers can deploy a ClusterRoleBinding binding a service account to cluster-admin, which the pipeline applies with cluster-wide credentials, granting control over all workloads and secrets."}],"id":"CVE-2026-127073","lastModified":"2026-11-13T15:45:24.843","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.9,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.1,"impactScore":6.0,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:03.200","references":[{"source":"disclosure@vulncheck.com","url":"https://gist.github.com/neelkotnis/7bc715e190e5be2c2fc5be15c4035ce7"},{"source":"disclosure@vulncheck.com","url":"https://www.buildpiper.io/"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/opstree-buildpiper-before-2.7.0-privilege-escalation-via-additional-manifest"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"BuildPiper","vendor":"OpsTree Solutions","versions":[{"lessThan":"2.7.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpsTree BuildPiper before 2.7.0 contains a privilege escalation vulnerability that allows project users to gain Kubernetes cluster-admin rights by submitting unrestricted manifests through the Additional Manifest feature. Attackers can deploy a ClusterRoleBinding binding a service account to cluster-admin, which the pipeline applies with cluster-wide credentials, granting control over all workloads and secrets."}],"id":"CVE-2026-127073","lastModified":"2026-11-13T19:19:27.837","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.9,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.1,"impactScore":6.0,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127073","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:34:34.459034Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:03.200","references":[{"source":"disclosure@vulncheck.com","url":"https://gist.github.com/neelkotnis/7bc715e190e5be2c2fc5be15c4035ce7"},{"source":"disclosure@vulncheck.com","url":"https://www.buildpiper.io/"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/opstree-buildpiper-before-2.7.0-privilege-escalation-via-additional-manifest"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127077.json b/data/2026/CVE-2026-127077.json
index 25d86a5035..e1566a8637 100644
--- a/data/2026/CVE-2026-127077.json
+++ b/data/2026/CVE-2026-127077.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"BuildPiper","vendor":"OpsTree Solutions","versions":[{"lessThan":"2.7.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to create environments on unassigned Kubernetes clusters by tampering with cluster_id and namespaces values. Attackers can modify requests to POST /api/v1/project/{project_id}/env/ to target another project's cluster, then trigger builds and deployments into it, bypassing project isolation."}],"id":"CVE-2026-127077","lastModified":"2026-11-13T15:45:24.843","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:03.820","references":[{"source":"disclosure@vulncheck.com","url":"https://gist.github.com/neelkotnis/e6ba937a2ea3f06fc0a79bd6193e4574"},{"source":"disclosure@vulncheck.com","url":"https://www.buildpiper.io/"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/opstree-buildpiper-before-2.7.0-authorization-bypass-via-environment-creation-api"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"BuildPiper","vendor":"OpsTree Solutions","versions":[{"lessThan":"2.7.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to create environments on unassigned Kubernetes clusters by tampering with cluster_id and namespaces values. Attackers can modify requests to POST /api/v1/project/{project_id}/env/ to target another project's cluster, then trigger builds and deployments into it, bypassing project isolation."}],"id":"CVE-2026-127077","lastModified":"2026-11-13T19:19:28.007","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127077","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:33:42.611024Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:03.820","references":[{"source":"disclosure@vulncheck.com","url":"https://gist.github.com/neelkotnis/e6ba937a2ea3f06fc0a79bd6193e4574"},{"source":"disclosure@vulncheck.com","url":"https://www.buildpiper.io/"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/opstree-buildpiper-before-2.7.0-authorization-bypass-via-environment-creation-api"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127081.json b/data/2026/CVE-2026-127081.json
index 2687324dac..6999589bdd 100644
--- a/data/2026/CVE-2026-127081.json
+++ b/data/2026/CVE-2026-127081.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"BuildPiper","vendor":"OpsTree Solutions","versions":[{"lessThan":"2.7.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to link pipeline stages to environments of other projects by supplying a foreign project_env_id. Attackers can submit another project's environment identifier to the POST /api/v1/pipeline/{pipeline_id}/stages/ endpoint, persisting cross-project associations that bypass project separation."}],"id":"CVE-2026-127081","lastModified":"2026-11-13T15:45:24.843","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:04.403","references":[{"source":"disclosure@vulncheck.com","url":"https://gist.github.com/neelkotnis/0f4aaf3d9ab99950c7f643546fd7d713"},{"source":"disclosure@vulncheck.com","url":"https://www.buildpiper.io/"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/opstree-buildpiper-before-2.7.0-authorization-bypass-via-pipeline-stage-project-env-id"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"BuildPiper","vendor":"OpsTree Solutions","versions":[{"lessThan":"2.7.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to link pipeline stages to environments of other projects by supplying a foreign project_env_id. Attackers can submit another project's environment identifier to the POST /api/v1/pipeline/{pipeline_id}/stages/ endpoint, persisting cross-project associations that bypass project separation."}],"id":"CVE-2026-127081","lastModified":"2026-11-13T19:19:28.503","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127081","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:31:37.112099Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:04.403","references":[{"source":"disclosure@vulncheck.com","url":"https://gist.github.com/neelkotnis/0f4aaf3d9ab99950c7f643546fd7d713"},{"source":"disclosure@vulncheck.com","url":"https://www.buildpiper.io/"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/opstree-buildpiper-before-2.7.0-authorization-bypass-via-pipeline-stage-project-env-id"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127085.json b/data/2026/CVE-2026-127085.json
index d04d34eb51..34cacdc986 100644
--- a/data/2026/CVE-2026-127085.json
+++ b/data/2026/CVE-2026-127085.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/IgnisDa/ryot","product":"ryot","repo":"https://github.com/IgnisDa/ryot","vendor":"IgnisDa","versions":[{"lessThan":"10.5.6","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to remove entries from other users' collections by supplying arbitrary collectionName and creatorUserId values. Attackers can obtain user ids from the usersList query and target fixed collection names like Watchlist to delete collection_to_entity rows belonging to other users."}],"id":"CVE-2026-127085","lastModified":"2026-11-13T15:53:39.657","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:05.010","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/IgnisDa/ryot/blob/v10.5.5/crates/utils/dependent/collection/src/lib.rs#L232-L251"},{"source":"disclosure@vulncheck.com","url":"https://github.com/IgnisDa/ryot/commit/822cc6701b46aedbc436abbf02e7efb94afd5f05"},{"source":"disclosure@vulncheck.com","url":"https://github.com/IgnisDa/ryot/releases/tag/v10.5.6"},{"source":"disclosure@vulncheck.com","url":"https://github.com/IgnisDa/ryot/security/advisories/GHSA-qwh4-gwr7-95x8"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/ryot-before-10.5.6-authorization-bypass-via-deployremoveentitiesfromcollectionjob"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/IgnisDa/ryot","product":"ryot","repo":"https://github.com/IgnisDa/ryot","vendor":"IgnisDa","versions":[{"lessThan":"10.5.6","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to remove entries from other users' collections by supplying arbitrary collectionName and creatorUserId values. Attackers can obtain user ids from the usersList query and target fixed collection names like Watchlist to delete collection_to_entity rows belonging to other users."}],"id":"CVE-2026-127085","lastModified":"2026-11-13T19:19:28.647","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127085","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:17:44.374719Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:05.010","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/IgnisDa/ryot/blob/v10.5.5/crates/utils/dependent/collection/src/lib.rs#L232-L251"},{"source":"disclosure@vulncheck.com","url":"https://github.com/IgnisDa/ryot/commit/822cc6701b46aedbc436abbf02e7efb94afd5f05"},{"source":"disclosure@vulncheck.com","url":"https://github.com/IgnisDa/ryot/releases/tag/v10.5.6"},{"source":"disclosure@vulncheck.com","url":"https://github.com/IgnisDa/ryot/security/advisories/GHSA-qwh4-gwr7-95x8"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/ryot-before-10.5.6-authorization-bypass-via-deployremoveentitiesfromcollectionjob"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/IgnisDa/ryot/security/advisories/GHSA-qwh4-gwr7-95x8"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127090.json b/data/2026/CVE-2026-127090.json
index 4474a548ee..b3d47b272a 100644
--- a/data/2026/CVE-2026-127090.json
+++ b/data/2026/CVE-2026-127090.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:maven/com.sshtools/maverick-synergy-server","product":"Maverick Synergy Server","repo":"https://github.com/sshtools/maverick-synergy","vendor":"Jadaptive","versions":[{"lessThan":"3.0.33","status":"affected","version":"0","versionType":"semver"},{"lessThan":"3.1.7","status":"affected","version":"3.1.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Maverick Legacy Server","vendor":"Jadaptive","versions":[{"lessThan":"1.8.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1, contain an authentication bypass vulnerability in SSH public key authentication that reuses cached key authorization decisions across usernames. Attackers holding a key authorized for one account can authenticate it, then send a signed SSH_MSG_USERAUTH_REQUEST with a different username on the same connection to log in as that account."}],"id":"CVE-2026-127090","lastModified":"2026-11-13T15:54:09.263","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:05.620","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/sshtools/maverick-synergy/blob/3.1.4/maverick-base/src/main/java/com/sshtools/common/auth/PublicKeyAuthentication.java#L82-L100"},{"source":"disclosure@vulncheck.com","url":"https://github.com/sshtools/maverick-synergy/blob/3.1.4/maverick-synergy-server/src/main/java/com/sshtools/server/AuthenticationProtocolServer.java#L185-L200"},{"source":"disclosure@vulncheck.com","url":"https://github.com/sshtools/maverick-synergy/commit/f7d23182cce985e21048215e96395881295cb0bd"},{"source":"disclosure@vulncheck.com","url":"https://jadaptive.com/security/advisories/JADAPTIVE-SA-2026-001"},{"source":"disclosure@vulncheck.com","url":"https://store.jadaptive.com/app/api/releases/changes/01d04a39-0f05-4bae-842e-d2f1acc16985"},{"source":"disclosure@vulncheck.com","url":"https://store.jadaptive.com/app/api/releases/changes/ff71bdcf-a2a2-47e0-af5a-22e15af1dfa4"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/jadaptive-maverick-synergy-server-before-3.0.33-and-3.1-x-before-3.1.7-and-maverick-legacy-server-before-1.8.1-ssh-public-key-cross-user-authentication-bypass"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-305"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:maven/com.sshtools/maverick-synergy-server","product":"Maverick Synergy Server","repo":"https://github.com/sshtools/maverick-synergy","vendor":"Jadaptive","versions":[{"lessThan":"3.0.33","status":"affected","version":"0","versionType":"semver"},{"lessThan":"3.1.7","status":"affected","version":"3.1.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Maverick Legacy Server","vendor":"Jadaptive","versions":[{"lessThan":"1.8.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1, contain an authentication bypass vulnerability in SSH public key authentication that reuses cached key authorization decisions across usernames. Attackers holding a key authorized for one account can authenticate it, then send a signed SSH_MSG_USERAUTH_REQUEST with a different username on the same connection to log in as that account."}],"id":"CVE-2026-127090","lastModified":"2026-11-13T19:19:28.777","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127090","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:24:36.800035Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:05.620","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/sshtools/maverick-synergy/blob/3.1.4/maverick-base/src/main/java/com/sshtools/common/auth/PublicKeyAuthentication.java#L82-L100"},{"source":"disclosure@vulncheck.com","url":"https://github.com/sshtools/maverick-synergy/blob/3.1.4/maverick-synergy-server/src/main/java/com/sshtools/server/AuthenticationProtocolServer.java#L185-L200"},{"source":"disclosure@vulncheck.com","url":"https://github.com/sshtools/maverick-synergy/commit/f7d23182cce985e21048215e96395881295cb0bd"},{"source":"disclosure@vulncheck.com","url":"https://jadaptive.com/security/advisories/JADAPTIVE-SA-2026-001"},{"source":"disclosure@vulncheck.com","url":"https://store.jadaptive.com/app/api/releases/changes/01d04a39-0f05-4bae-842e-d2f1acc16985"},{"source":"disclosure@vulncheck.com","url":"https://store.jadaptive.com/app/api/releases/changes/ff71bdcf-a2a2-47e0-af5a-22e15af1dfa4"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/jadaptive-maverick-synergy-server-before-3.0.33-and-3.1-x-before-3.1.7-and-maverick-legacy-server-before-1.8.1-ssh-public-key-cross-user-authentication-bypass"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-305"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127094.json b/data/2026/CVE-2026-127094.json
index 01e9fcab8c..6dd1b7a2f8 100644
--- a/data/2026/CVE-2026-127094.json
+++ b/data/2026/CVE-2026-127094.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","product":"Pagelayer","repo":"https://plugins.svn.wordpress.org/pagelayer/","vendor":"Pagelayer Team","versions":[{"lessThan":"2.2.1","status":"affected","version":"2.1.7","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Pagelayer 2.1.7 before 2.2.1 contains a missing authorization vulnerability in Abilities API abilities registered in main/abilitiesregister.php that only require the edit_posts capability. Contributor-level attackers can overwrite, publish, delete, or duplicate other users' private posts and pages to read them, and modify site-wide theme templates like headers and footers."}],"id":"CVE-2026-127094","lastModified":"2026-11-13T16:18:55.423","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.7,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:06.300","references":[{"source":"disclosure@vulncheck.com","url":"https://lazytitan.ro/pagelayer"},{"source":"disclosure@vulncheck.com","url":"https://plugins.svn.wordpress.org/pagelayer/tags/2.1.9/main/abilitiesregister.php"},{"source":"disclosure@vulncheck.com","url":"https://plugins.trac.wordpress.org/changeset/3698421/pagelayer"},{"source":"disclosure@vulncheck.com","url":"https://wpsec.com/vuln/WPSEC-2026-0215"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/pagelayer-2.1.7-before-2.2.1-missing-authorization-via-abilities-api"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","product":"Pagelayer","repo":"https://plugins.svn.wordpress.org/pagelayer/","vendor":"Pagelayer Team","versions":[{"lessThan":"2.2.1","status":"affected","version":"2.1.7","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Pagelayer 2.1.7 before 2.2.1 contains a missing authorization vulnerability in Abilities API abilities registered in main/abilitiesregister.php that only require the edit_posts capability. Contributor-level attackers can overwrite, publish, delete, or duplicate other users' private posts and pages to read them, and modify site-wide theme templates like headers and footers."}],"id":"CVE-2026-127094","lastModified":"2026-11-13T19:19:28.927","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.7,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127094","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:22:28.515903Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:06.300","references":[{"source":"disclosure@vulncheck.com","url":"https://lazytitan.ro/pagelayer"},{"source":"disclosure@vulncheck.com","url":"https://plugins.svn.wordpress.org/pagelayer/tags/2.1.9/main/abilitiesregister.php"},{"source":"disclosure@vulncheck.com","url":"https://plugins.trac.wordpress.org/changeset/3698421/pagelayer"},{"source":"disclosure@vulncheck.com","url":"https://wpsec.com/vuln/WPSEC-2026-0215"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/pagelayer-2.1.7-before-2.2.1-missing-authorization-via-abilities-api"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127111.json b/data/2026/CVE-2026-127111.json
index f0ec9ef3ed..ba967b728a 100644
--- a/data/2026/CVE-2026-127111.json
+++ b/data/2026/CVE-2026-127111.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/Alinto/sogo","product":"sogo","repo":"https://github.com/Alinto/sogo","vendor":"Alinto","versions":[{"lessThan":"5.12.13","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SOGo before 5.12.13 contains an improper restriction of excessive authentication attempts vulnerability that allows unauthenticated attackers to reset account passwords by repeatedly guessing secret-question answers via the passwordRecoveryCheck endpoint without lockout or rate limiting. Attackers can submit unlimited candidate answers to obtain a valid recovery JWT, then use it to change the account password without the old credential and log in via the connect endpoint, achieving full account takeover on accounts without TOTP enabled."}],"id":"CVE-2026-127111","lastModified":"2026-11-12T16:19:07.527","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-12T16:19:07.260","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/Alinto/sogo/releases/tag/SOGo-5.12.13"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/sogo-before-unauthenticated-password-recovery-brute-force"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-307"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/Alinto/sogo","product":"sogo","repo":"https://github.com/Alinto/sogo","vendor":"Alinto","versions":[{"lessThan":"5.12.13","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SOGo before 5.12.13 contains an improper restriction of excessive authentication attempts vulnerability that allows unauthenticated attackers to reset account passwords by repeatedly guessing secret-question answers via the passwordRecoveryCheck endpoint without lockout or rate limiting. Attackers can submit unlimited candidate answers to obtain a valid recovery JWT, then use it to change the account password without the old credential and log in via the connect endpoint, achieving full account takeover on accounts without TOTP enabled."}],"id":"CVE-2026-127111","lastModified":"2026-11-13T19:19:29.070","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127111","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:39:48.154981Z","version":"2.0.3"}}]},"published":"2026-11-12T16:19:07.260","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/Alinto/sogo/releases/tag/SOGo-5.12.13"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/sogo-before-unauthenticated-password-recovery-brute-force"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-307"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127122.json b/data/2026/CVE-2026-127122.json
index ef6164407c..4e9671a3e4 100644
--- a/data/2026/CVE-2026-127122.json
+++ b/data/2026/CVE-2026-127122.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 does not check the number of MCR request blocks in a Connect request against the number of multicast communication relations that an Application Relationship has room for (PNET_MAX_MC_CR, 1 by default). Each further block is written past the end of the array, into the rest of the Application Relationship and, with more blocks, into the following one. The written data comes from the request. No established Application Relationship is needed, and the attacker requires ADJACENT network access. Builds with PNET_OPTION_MC_CR disabled are not affected."}],"id":"CVE-2026-127122","lastModified":"2026-11-13T14:17:54.657","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":7.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]},"published":"2026-11-13T14:17:54.500","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 does not check the number of MCR request blocks in a Connect request against the number of multicast communication relations that an Application Relationship has room for (PNET_MAX_MC_CR, 1 by default). Each further block is written past the end of the array, into the rest of the Application Relationship and, with more blocks, into the following one. The written data comes from the request. No established Application Relationship is needed, and the attacker requires ADJACENT network access. Builds with PNET_OPTION_MC_CR disabled are not affected."}],"id":"CVE-2026-127122","lastModified":"2026-11-13T20:18:50.133","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":7.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127122","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:54:47.653840Z","version":"2.0.3"}}]},"published":"2026-11-13T14:17:54.500","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127123.json b/data/2026/CVE-2026-127123.json
index dd400dad82..6143f381f9 100644
--- a/data/2026/CVE-2026-127123.json
+++ b/data/2026/CVE-2026-127123.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 releases the Application Relationship of an RPC session, without the abort procedure, when a fragment of a request has another data representation (endianness) than the first fragment of the call. The application is not told that the Application Relationship is gone, the cyclic data stops, and the resources of the Application Relationship are left referencing a cleared structure. Another host can then connect in its place. A host with ADJACENT network access that has observed the activity UUID of the connection, which is sent in clear in every RPC request, can do this with one PDU."}],"id":"CVE-2026-127123","lastModified":"2026-11-13T14:17:54.800","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]},"published":"2026-11-13T14:17:54.703","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-404"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 releases the Application Relationship of an RPC session, without the abort procedure, when a fragment of a request has another data representation (endianness) than the first fragment of the call. The application is not told that the Application Relationship is gone, the cyclic data stops, and the resources of the Application Relationship are left referencing a cleared structure. Another host can then connect in its place. A host with ADJACENT network access that has observed the activity UUID of the connection, which is sent in clear in every RPC request, can do this with one PDU."}],"id":"CVE-2026-127123","lastModified":"2026-11-13T20:18:51.300","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127123","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:54:37.258405Z","version":"2.0.3"}}]},"published":"2026-11-13T14:17:54.703","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-404"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127124.json b/data/2026/CVE-2026-127124.json
index 3e2875cba8..ee5450546b 100644
--- a/data/2026/CVE-2026-127124.json
+++ b/data/2026/CVE-2026-127124.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 keeps the RPC session that is allocated for a fragment of a request with an unknown activity UUID, without a timeout, when the rest of the request never arrives. A session that does not get an Application Relationship is also kept after the response. Repeated fragments or requests with different activity UUIDs exhaust the available sessions, one UDP packet per session. Once they are exhausted the device no longer answers a Connect request until it is restarted. An unauthenticated attacker with ADJACENT network access can use this to cause a denial of service."}],"id":"CVE-2026-127124","lastModified":"2026-11-13T14:17:54.973","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]},"published":"2026-11-13T14:17:54.843","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-772"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 keeps the RPC session that is allocated for a fragment of a request with an unknown activity UUID, without a timeout, when the rest of the request never arrives. A session that does not get an Application Relationship is also kept after the response. Repeated fragments or requests with different activity UUIDs exhaust the available sessions, one UDP packet per session. Once they are exhausted the device no longer answers a Connect request until it is restarted. An unauthenticated attacker with ADJACENT network access can use this to cause a denial of service."}],"id":"CVE-2026-127124","lastModified":"2026-11-13T20:18:52.327","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127124","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:54:28.724324Z","version":"2.0.3"}}]},"published":"2026-11-13T14:17:54.843","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-772"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127125.json b/data/2026/CVE-2026-127125.json
index cc070378a9..1e5f62057b 100644
--- a/data/2026/CVE-2026-127125.json
+++ b/data/2026/CVE-2026-127125.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 aborts the Application Relationship of an RPC session when a fragment of a response has been resent without being acknowledged, without checking that the session has an Application Relationship. A request for an existing Application Relationship that is sent on another activity than its Connect, and gets a fragmented response, is handled on a session without one. If the response is not acknowledged, a NULL pointer is dereferenced and the device crashes. A conformant IO-controller does not send such requests. The attacker must have observed the AR UUID of an established Application Relationship and requires ADJACENT network access."}],"id":"CVE-2026-127125","lastModified":"2026-11-13T14:17:55.190","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]},"published":"2026-11-13T14:17:55.077","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-476"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"P-Net","vendor":"RT-Labs","versions":[{"lessThan":"1.0.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee"}],"cveTags":[],"descriptions":[{"lang":"en","value":"P-Net before 1.0.4 aborts the Application Relationship of an RPC session when a fragment of a response has been resent without being acknowledged, without checking that the session has an Application Relationship. A request for an existing Application Relationship that is sent on another activity than its Connect, and gets a fragmented response, is handled on a session without one. If the response is not acknowledged, a NULL pointer is dereferenced and the device crashes. A conformant IO-controller does not send such requests. The attacker must have observed the AR UUID of an established Application Relationship and requires ADJACENT network access."}],"id":"CVE-2026-127125","lastModified":"2026-11-13T20:18:53.337","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127125","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:54:16.410595Z","version":"2.0.3"}}]},"published":"2026-11-13T14:17:55.077","references":[{"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","url":"https://rt-labs.com/wp-content/uploads/2026/11/RRTL-261109-01.pdf"}],"sourceIdentifier":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-476"}],"source":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127135.json b/data/2026/CVE-2026-127135.json
index c8a32b93ea..fe8fc9a367 100644
--- a/data/2026/CVE-2026-127135.json
+++ b/data/2026/CVE-2026-127135.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/Alinto/sogo","product":"sogo","repo":"https://github.com/Alinto/sogo","vendor":"Alinto","versions":[{"lessThan":"5.12.13","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SOGo before 5.12.13 contains a Sieve script injection vulnerability that allows authenticated users to inject arbitrary Sieve directives by inserting unescaped notification address values into a generated Sieve script. Attackers can embed Sieve redirect or discard statements within the notificationAddress preference to bypass the administrator-configured forwarding-domain constraint and redirect or discard incoming mail."}],"id":"CVE-2026-127135","lastModified":"2026-11-12T16:19:08.170","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-12T16:19:08.030","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/Alinto/sogo/releases/tag/SOGo-5.12.13"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/sogo-before-sieve-script-injection-via-notification-address"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-96"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/Alinto/sogo","product":"sogo","repo":"https://github.com/Alinto/sogo","vendor":"Alinto","versions":[{"lessThan":"5.12.13","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SOGo before 5.12.13 contains a Sieve script injection vulnerability that allows authenticated users to inject arbitrary Sieve directives by inserting unescaped notification address values into a generated Sieve script. Attackers can embed Sieve redirect or discard statements within the notificationAddress preference to bypass the administrator-configured forwarding-domain constraint and redirect or discard incoming mail."}],"id":"CVE-2026-127135","lastModified":"2026-11-13T19:19:29.203","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127135","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:49:39.482833Z","version":"2.0.3"}}]},"published":"2026-11-12T16:19:08.030","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/Alinto/sogo/releases/tag/SOGo-5.12.13"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/sogo-before-sieve-script-injection-via-notification-address"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-96"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127204.json b/data/2026/CVE-2026-127204.json
index 5f99f114b3..4580b3a865 100644
--- a/data/2026/CVE-2026-127204.json
+++ b/data/2026/CVE-2026-127204.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Payment Gateway for PayPal Pro, PayPal Checkout & Subscriptions for WooCommerce","vendor":"wp.insider","versions":[{"lessThan":"4.1.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"WooCommerce PayPal Pro Payment Gateway plugin before 4.1.1 contains an unauthenticated payment bypass vulnerability that allows remote attackers to mark unpaid orders as paid by exploiting the pp_capture_order AJAX handler, which is gated only by a public checkout nonce and fails to properly validate the PayPal capture response status. Attackers can supply a valid _paypal_order_id to trigger payment_complete() without verifying the capture status or amount, causing the store to fulfill goods or services that were never paid for and resulting in direct financial loss to the merchant."}],"id":"CVE-2026-127204","lastModified":"2026-11-12T20:28:31.817","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-12T18:17:42.423","references":[{"source":"disclosure@vulncheck.com","url":"https://wordpress.org/plugins/woocommerce-paypal-pro-payment-gateway/#developers"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/woocommerce-paypal-pro-payment-gateway-payment-bypass-via-pp-capture-order"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-345"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Payment Gateway for PayPal Pro, PayPal Checkout & Subscriptions for WooCommerce","vendor":"wp.insider","versions":[{"lessThan":"4.1.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"WooCommerce PayPal Pro Payment Gateway plugin before 4.1.1 contains an unauthenticated payment bypass vulnerability that allows remote attackers to mark unpaid orders as paid by exploiting the pp_capture_order AJAX handler, which is gated only by a public checkout nonce and fails to properly validate the PayPal capture response status. Attackers can supply a valid _paypal_order_id to trigger payment_complete() without verifying the capture status or amount, causing the store to fulfill goods or services that were never paid for and resulting in direct financial loss to the merchant."}],"id":"CVE-2026-127204","lastModified":"2026-11-13T19:19:29.357","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127204","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:58:47.797078Z","version":"2.0.3"}}]},"published":"2026-11-12T18:17:42.423","references":[{"source":"disclosure@vulncheck.com","url":"https://wordpress.org/plugins/woocommerce-paypal-pro-payment-gateway/#developers"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/woocommerce-paypal-pro-payment-gateway-payment-bypass-via-pp-capture-order"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-345"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127207.json b/data/2026/CVE-2026-127207.json
index e663e9da50..930d697e1b 100644
--- a/data/2026/CVE-2026-127207.json
+++ b/data/2026/CVE-2026-127207.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Sendcloud for WooCommerce: Automated Shipping, Branded Tracking & Returns","vendor":"Sendcloud","versions":[{"lessThanOrEqual":"1.0.41","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privileged users, including Subscribers, to access the sc_support_get and sc_support_save AJAX actions due to the absence of capability and nonce checks in SCCSP_Support_Controller. Attackers can call these wp_ajax_ handlers directly or via cross-site request forgery to disclose integration configuration data such as INTEGRATION_ID, SERVICE_POINT, CARRIERS, and MIN_LOG_LEVEL, and to modify the plugin's logging verbosity. This is an incomplete fix of CVE-2026-57760."}],"id":"CVE-2026-127207","lastModified":"2026-11-12T21:36:06.743","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-12T21:17:22.740","references":[{"source":"disclosure@vulncheck.com","url":"https://hackmd.io/@buiih/HJ39N1-0Mx"},{"source":"disclosure@vulncheck.com","url":"https://wordpress.org/plugins/sendcloud-connected-shipping/"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/sendcloud-for-woocommerce-missing-authorization-via-ajax-actions"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Sendcloud for WooCommerce: Automated Shipping, Branded Tracking & Returns","vendor":"Sendcloud","versions":[{"lessThanOrEqual":"1.0.41","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privileged users, including Subscribers, to access the sc_support_get and sc_support_save AJAX actions due to the absence of capability and nonce checks in SCCSP_Support_Controller. Attackers can call these wp_ajax_ handlers directly or via cross-site request forgery to disclose integration configuration data such as INTEGRATION_ID, SERVICE_POINT, CARRIERS, and MIN_LOG_LEVEL, and to modify the plugin's logging verbosity. This is an incomplete fix of CVE-2026-57760."}],"id":"CVE-2026-127207","lastModified":"2026-11-13T20:18:54.357","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-127207","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:25:41.067313Z","version":"2.0.3"}}]},"published":"2026-11-12T21:17:22.740","references":[{"source":"disclosure@vulncheck.com","url":"https://hackmd.io/@buiih/HJ39N1-0Mx"},{"source":"disclosure@vulncheck.com","url":"https://wordpress.org/plugins/sendcloud-connected-shipping/"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/sendcloud-for-woocommerce-missing-authorization-via-ajax-actions"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-127213.json b/data/2026/CVE-2026-127213.json
new file mode 100644
index 0000000000..9316b8df72
--- /dev/null
+++ b/data/2026/CVE-2026-127213.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"LearnPress – Course Wishlist","vendor":"ThimPress","versions":[{"lessThan":"4.1.2","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"LearnPress Course Wishlist Add-on before 4.1.2 contains an insecure direct object reference vulnerability that allows remote attackers to manipulate any user's course wishlist by supplying an arbitrary user_id parameter to the render_button callback instead of relying on the session identity. Attackers can exploit the publicly accessible load_content_via_ajax REST route, which only requires a public wp_rest nonce, to add or remove courses from any user's wishlist and determine whether a given course is wishlisted by iterating user_id and course_id values."}],"id":"CVE-2026-127213","lastModified":"2026-11-13T20:18:55.403","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T20:18:55.403","references":[{"source":"disclosure@vulncheck.com","url":"https://wordpress.org/plugins/learnpress-wishlist/#developers"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/learnpress-course-wishlist-idor-via-render-button"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-127214.json b/data/2026/CVE-2026-127214.json
new file mode 100644
index 0000000000..ec54b5966b
--- /dev/null
+++ b/data/2026/CVE-2026-127214.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/FlowiseAI/Flowise","product":"Flowise","repo":"https://github.com/FlowiseAI/Flowise","vendor":"FlowiseAI","versions":[{"lessThanOrEqual":"3.1.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[{"sourceIdentifier":"disclosure@vulncheck.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"Flowise through 3.1.4 contains a server-side request forgery vulnerability that allows authenticated attackers with chatflows or agentflows create/update permissions to bypass the Custom Function sandbox's SSRF protection by requiring a module subpath inside an allowlisted package, such as axios/dist/node/axios.cjs or node-fetch/lib/index.js, which evades the vm2 mock table and returns an unwrapped HTTP client that skips the checkDenyList validation. Attackers can issue arbitrary GET and POST requests with attacker-controlled bodies via POST /api/v1/node-custom-function to reach loopback and internal-network addresses or the cloud metadata endpoint, enabling network mapping, credential disclosure, and state changes on internal services."}],"id":"CVE-2026-127214","lastModified":"2026-11-13T20:18:55.707","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":4.7,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T20:18:55.573","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/soovwv/cve/blob/main/research/flowise-ssrf-bypass-via-subpath-import.md"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/flowise-ssrf-bypass-via-custom-function-sandbox"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-918"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-127215.json b/data/2026/CVE-2026-127215.json
new file mode 100644
index 0000000000..80c7861803
--- /dev/null
+++ b/data/2026/CVE-2026-127215.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Kanbanz","vendor":"Softaculous","versions":[{"lessThan":"1.0.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Kanbanz by Softaculous plugin for WordPress before 1.0.3 contains a broken access control vulnerability that allows authenticated Kanban Staff users to access and modify boards they are not members of by exploiting admin-ajax handlers that fail to call kanbanz_user_can_access_board() or per-task edit checks on attacker-supplied board_id or task_id parameters. Attackers can supply arbitrary board IDs to read sensitive task data, overwrite status columns, subtasks, and labels, inject comments, upload or delete attachments, and create tasks or set WIP limits on boards owned by other teams."}],"id":"CVE-2026-127215","lastModified":"2026-11-13T20:18:55.757","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T20:18:55.757","references":[{"source":"disclosure@vulncheck.com","url":"https://wordpress.org/plugins/kanbanz/#developers"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/kanbanz-wordpress-plugin-broken-access-control-via-admin-ajax-handlers"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128017.json b/data/2026/CVE-2026-128017.json
index 53efda1d23..dd47cb7ec9 100644
--- a/data/2026/CVE-2026-128017.json
+++ b/data/2026/CVE-2026-128017.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:golang/github.com/dunglas/frankenphp","product":"frankenphp","vendor":"php","versions":[{"lessThan":"1.13.4","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"1.13.4","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"FrankenPHP before 1.13.4 contains a double free vulnerability in worker mode that frees SG(request_info).content_type_dup twice when a worker script ends its loop after a non-form POST request. Unauthenticated attackers can send repeated JSON POST requests until the worker loop ends, aborting the whole process when USE_ZEND_ALLOC=0 is set."}],"id":"CVE-2026-128017","lastModified":"2026-11-13T10:18:07.093","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:06.970","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/php/frankenphp/commit/8777cc2e5c872ebb869fa2b5f972a913648621e8"},{"source":"disclosure@vulncheck.com","url":"https://github.com/php/frankenphp/security/advisories/GHSA-h764-4wh7-m7j2"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/frankenphp-before-1.13.4-double-free-in-worker-mode-via-non-form-post"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-415"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:golang/github.com/dunglas/frankenphp","product":"frankenphp","vendor":"php","versions":[{"lessThan":"1.13.4","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"1.13.4","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"FrankenPHP before 1.13.4 contains a double free vulnerability in worker mode that frees SG(request_info).content_type_dup twice when a worker script ends its loop after a non-form POST request. Unauthenticated attackers can send repeated JSON POST requests until the worker loop ends, aborting the whole process when USE_ZEND_ALLOC=0 is set."}],"id":"CVE-2026-128017","lastModified":"2026-11-13T19:19:29.480","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-128017","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:21:40.109899Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:06.970","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/php/frankenphp/commit/8777cc2e5c872ebb869fa2b5f972a913648621e8"},{"source":"disclosure@vulncheck.com","url":"https://github.com/php/frankenphp/security/advisories/GHSA-h764-4wh7-m7j2"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/frankenphp-before-1.13.4-double-free-in-worker-mode-via-non-form-post"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/php/frankenphp/security/advisories/GHSA-h764-4wh7-m7j2"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-415"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-128021.json b/data/2026/CVE-2026-128021.json
index 5b00d87dcd..8fd2273897 100644
--- a/data/2026/CVE-2026-128021.json
+++ b/data/2026/CVE-2026-128021.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:golang/github.com/dunglas/frankenphp","product":"frankenphp","vendor":"php","versions":[{"lessThan":"1.13.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"1.13.2","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"FrankenPHP before 1.13.2 contains an information disclosure vulnerability that allows later clients to read earlier clients' libxml errors because worker mode never resets LIBXML(error_list) between requests. Attackers sending requests to the same worker thread can call libxml_get_errors() or libxml_get_last_error() to obtain other clients' parsed-document fragments and server filesystem paths."}],"id":"CVE-2026-128021","lastModified":"2026-11-13T10:18:07.737","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:07.623","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/php/frankenphp/security/advisories/GHSA-4gfw-9v29-gp9h"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/frankenphp-before-1.13.2-information-disclosure-via-libxml-error-state-in-worker-mode"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:golang/github.com/dunglas/frankenphp","product":"frankenphp","vendor":"php","versions":[{"lessThan":"1.13.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"1.13.2","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"FrankenPHP before 1.13.2 contains an information disclosure vulnerability that allows later clients to read earlier clients' libxml errors because worker mode never resets LIBXML(error_list) between requests. Attackers sending requests to the same worker thread can call libxml_get_errors() or libxml_get_last_error() to obtain other clients' parsed-document fragments and server filesystem paths."}],"id":"CVE-2026-128021","lastModified":"2026-11-13T19:19:29.610","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-128021","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:20:46.471001Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:07.623","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/php/frankenphp/security/advisories/GHSA-4gfw-9v29-gp9h"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/frankenphp-before-1.13.2-information-disclosure-via-libxml-error-state-in-worker-mode"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/php/frankenphp/security/advisories/GHSA-4gfw-9v29-gp9h"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-128025.json b/data/2026/CVE-2026-128025.json
index da87b745c5..0083e019ac 100644
--- a/data/2026/CVE-2026-128025.json
+++ b/data/2026/CVE-2026-128025.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:golang/github.com/dunglas/frankenphp","product":"frankenphp","vendor":"php","versions":[{"lessThan":"1.13.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"1.13.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"FrankenPHP before 1.13.0 contains a path-split interpretation conflict in splitPos in cgi.go that allows unauthenticated attackers to execute protected PHP scripts by embedding .php inside a filename component. Attackers can request paths like /uploads/a.php.txt/b.php to execute uploads/a.php despite route-level or WAF deny rules and forge PATH_INFO, SCRIPT_NAME, and PHP_SELF values."}],"id":"CVE-2026-128025","lastModified":"2026-11-13T10:18:08.347","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:08.237","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/php/frankenphp/security/advisories/GHSA-xxjp-cjxr-2x6m"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/frankenphp-before-1.13.0-cgi-path-split-boundary-bypass-via-splitpos"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-436"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:golang/github.com/dunglas/frankenphp","product":"frankenphp","vendor":"php","versions":[{"lessThan":"1.13.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"1.13.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"FrankenPHP before 1.13.0 contains a path-split interpretation conflict in splitPos in cgi.go that allows unauthenticated attackers to execute protected PHP scripts by embedding .php inside a filename component. Attackers can request paths like /uploads/a.php.txt/b.php to execute uploads/a.php despite route-level or WAF deny rules and forge PATH_INFO, SCRIPT_NAME, and PHP_SELF values."}],"id":"CVE-2026-128025","lastModified":"2026-11-13T19:19:29.737","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-128025","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:19:15.595269Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:08.237","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/php/frankenphp/security/advisories/GHSA-xxjp-cjxr-2x6m"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/frankenphp-before-1.13.0-cgi-path-split-boundary-bypass-via-splitpos"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/php/frankenphp/security/advisories/GHSA-xxjp-cjxr-2x6m"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-436"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-128029.json b/data/2026/CVE-2026-128029.json
index b6d606e1f3..020e5c357a 100644
--- a/data/2026/CVE-2026-128029.json
+++ b/data/2026/CVE-2026-128029.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"20.18.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"20.18.2","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"21.0.0-beta3","status":"affected","version":"21.0.0-beta1","versionType":"semver"},{"status":"unaffected","version":"21.0.0-beta3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting vulnerability in the Dataflow profile run page, which inserts catalog product import row errors into the page without escaping. Unauthenticated attackers can place markup in the store, type, or attribute_set columns of an import file to run script in the session of the administrator who imports it."}],"id":"CVE-2026-128029","lastModified":"2026-11-13T15:45:24.843","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:08.850","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/d10314ddda9a6081bc27370b463b5f77c2e499de"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-28hq-mq6h-fh2x"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.18.2-stored-xss-via-dataflow-import-row-errors"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"20.18.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"20.18.2","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"21.0.0-beta3","status":"affected","version":"21.0.0-beta1","versionType":"semver"},{"status":"unaffected","version":"21.0.0-beta3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting vulnerability in the Dataflow profile run page, which inserts catalog product import row errors into the page without escaping. Unauthenticated attackers can place markup in the store, type, or attribute_set columns of an import file to run script in the session of the administrator who imports it."}],"id":"CVE-2026-128029","lastModified":"2026-11-13T19:19:29.860","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":2.7,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-128029","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:06:43.831147Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:08.850","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/d10314ddda9a6081bc27370b463b5f77c2e499de"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-28hq-mq6h-fh2x"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.18.2-stored-xss-via-dataflow-import-row-errors"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-128033.json b/data/2026/CVE-2026-128033.json
index 82c30c6f95..5dd28f6522 100644
--- a/data/2026/CVE-2026-128033.json
+++ b/data/2026/CVE-2026-128033.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"20.18.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"20.18.2","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"21.0.0-beta3","status":"affected","version":"21.0.0-beta1","versionType":"semver"},{"status":"unaffected","version":"21.0.0-beta3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an information disclosure vulnerability in Mage_Rss_Model_Resource_Order::getAllCommentCollection(), which omits the is_visible_on_front filter for invoice, shipment and credit-memo comments. Authenticated customers can open the /rss/order/status feed for their order to read internal staff comments, such as fraud-review and payment notes."}],"id":"CVE-2026-128033","lastModified":"2026-11-13T15:45:24.843","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:09.410","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/2b7795664d55aadc43cc74e1527ab5b046ff7a8a"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-wmwx-442r-jc88"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.18.2-information-disclosure-via-order-status-rss-feed"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"20.18.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"20.18.2","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"21.0.0-beta3","status":"affected","version":"21.0.0-beta1","versionType":"semver"},{"status":"unaffected","version":"21.0.0-beta3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an information disclosure vulnerability in Mage_Rss_Model_Resource_Order::getAllCommentCollection(), which omits the is_visible_on_front filter for invoice, shipment and credit-memo comments. Authenticated customers can open the /rss/order/status feed for their order to read internal staff comments, such as fraud-review and payment notes."}],"id":"CVE-2026-128033","lastModified":"2026-11-13T19:19:29.980","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-128033","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:16:28.377475Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:09.410","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/2b7795664d55aadc43cc74e1527ab5b046ff7a8a"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-wmwx-442r-jc88"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.18.2-information-disclosure-via-order-status-rss-feed"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-128043.json b/data/2026/CVE-2026-128043.json
index 6462a1717c..694b070a61 100644
--- a/data/2026/CVE-2026-128043.json
+++ b/data/2026/CVE-2026-128043.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"20.19.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"20.19.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"21.0.0-beta3","status":"affected","version":"21.0.0-beta1","versionType":"semver"},{"status":"unaffected","version":"21.0.0-beta3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery vulnerability in PayPal cancel and decline return handlers that trust only the checkout session without verifying the request came from PayPal. Attackers can lure a shopper into a cross-site GET to paypal/standard/cancel to cancel their recent uninvoiced order, void pending authorizations, and restore items to the cart."}],"id":"CVE-2026-128043","lastModified":"2026-11-13T15:45:24.843","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:09.983","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/86c8895d586db61ac7d093ba4e473103a30882c8"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-2jfg-wx75-5cc8"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.19.0-csrf-via-paypal-cancel-return-handlers"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-352"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"20.19.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"20.19.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"21.0.0-beta3","status":"affected","version":"21.0.0-beta1","versionType":"semver"},{"status":"unaffected","version":"21.0.0-beta3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery vulnerability in PayPal cancel and decline return handlers that trust only the checkout session without verifying the request came from PayPal. Attackers can lure a shopper into a cross-site GET to paypal/standard/cancel to cancel their recent uninvoiced order, void pending authorizations, and restore items to the cart."}],"id":"CVE-2026-128043","lastModified":"2026-11-13T19:19:30.100","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-128043","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:15:19.684333Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:09.983","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/86c8895d586db61ac7d093ba4e473103a30882c8"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-2jfg-wx75-5cc8"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.19.0-csrf-via-paypal-cancel-return-handlers"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-352"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-128047.json b/data/2026/CVE-2026-128047.json
index b26949404e..8bbc255f9b 100644
--- a/data/2026/CVE-2026-128047.json
+++ b/data/2026/CVE-2026-128047.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"20.18.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"20.18.2","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"21.0.0-beta3","status":"affected","version":"21.0.0-beta1","versionType":"semver"},{"status":"unaffected","version":"21.0.0-beta3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenMage magento-lts before 20.18.2 and 21.0.0-beta pre-releases before 21.0.0-beta3 generate customer email-confirmation keys with md5(uniqid()) and customer and administrator password-reset tokens with the non-cryptographic uniqHash(). Unauthenticated attackers can brute-force the roughly 20-bit confirmation key via the unrate-limited confirmAction endpoint to log in as pending customers, or predict administrator reset tokens after recovering generator state."}],"id":"CVE-2026-128047","lastModified":"2026-11-13T15:45:24.843","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.2,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:10.543","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/4a8d91c692524de4a07e70af5367b6cb67a9516d"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/9f5a1c3cf63f5cf6ac9f90b041a97a474cea04c2"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-7j66-6mw7-rgfx"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.18.2-account-takeover-via-predictable-confirmation-key"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-330"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"20.18.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"20.18.2","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"21.0.0-beta3","status":"affected","version":"21.0.0-beta1","versionType":"semver"},{"status":"unaffected","version":"21.0.0-beta3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenMage magento-lts before 20.18.2 and 21.0.0-beta pre-releases before 21.0.0-beta3 generate customer email-confirmation keys with md5(uniqid()) and customer and administrator password-reset tokens with the non-cryptographic uniqHash(). Unauthenticated attackers can brute-force the roughly 20-bit confirmation key via the unrate-limited confirmAction endpoint to log in as pending customers, or predict administrator reset tokens after recovering generator state."}],"id":"CVE-2026-128047","lastModified":"2026-11-13T19:19:30.223","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.2,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-128047","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:09:42.453263Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:10.543","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/4a8d91c692524de4a07e70af5367b6cb67a9516d"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/9f5a1c3cf63f5cf6ac9f90b041a97a474cea04c2"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-7j66-6mw7-rgfx"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.18.2-account-takeover-via-predictable-confirmation-key"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-330"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-128052.json b/data/2026/CVE-2026-128052.json
index 6e86659963..55100c276d 100644
--- a/data/2026/CVE-2026-128052.json
+++ b/data/2026/CVE-2026-128052.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"20.19.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"20.19.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"21.0.0-beta3","status":"affected","version":"21.0.0-beta1","versionType":"semver"},{"status":"unaffected","version":"21.0.0-beta3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization vulnerability in the template filter's {{layout}} directive, which renders arbitrary layout handles without enforcing the admin/block whitelist that the {{block}} directive applies. Administrators with rights to edit email, CMS, widget or newsletter content can embed {{layout}} with arbitrary handles to render disallowed blocks and disclose limited information."}],"id":"CVE-2026-128052","lastModified":"2026-11-13T15:45:24.843","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":2.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:11.100","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/055ccb866c0fadfed2c27e8c0e9ebd10db0199df"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-fqq6-76qg-2r96"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.19.0-block-whitelist-bypass-via-layout-directive"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"20.19.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"20.19.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"magento-lts","vendor":"OpenMage","versions":[{"lessThan":"21.0.0-beta3","status":"affected","version":"21.0.0-beta1","versionType":"semver"},{"status":"unaffected","version":"21.0.0-beta3","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization vulnerability in the template filter's {{layout}} directive, which renders arbitrary layout handles without enforcing the admin/block whitelist that the {{block}} directive applies. Administrators with rights to edit email, CMS, widget or newsletter content can embed {{layout}} with arbitrary handles to render disallowed blocks and disclose limited information."}],"id":"CVE-2026-128052","lastModified":"2026-11-13T19:19:30.343","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":2.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-128052","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:08:51.636000Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:11.100","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/commit/055ccb866c0fadfed2c27e8c0e9ebd10db0199df"},{"source":"disclosure@vulncheck.com","url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-fqq6-76qg-2r96"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.19.0-block-whitelist-bypass-via-layout-directive"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-128080.json b/data/2026/CVE-2026-128080.json
new file mode 100644
index 0000000000..d27e3de3c6
--- /dev/null
+++ b/data/2026/CVE-2026-128080.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"opentelemetry-js","vendor":"open-telemetry","versions":[{"status":"affected","version":">= 0.204.0, < 0.222.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenTelemetry JavaScript is the OpenTelemetry JavaScript client. From 0.204.0 until 0.222.0, @opentelemetry/instrumentation-http writes the raw query string from incoming HTTP requests to the url.query server-span attribute without applying the redactedQueryParams protection used for outgoing spans. Services receiving signed URLs or other credentials in query parameters can therefore export still-valid secrets to tracing backends, where observability infrastructure and users with span-read access may read them. The redactedQueryParams option does not protect incoming spans in affected versions. This issue is fixed in version 0.222.0."}],"id":"CVE-2026-128080","lastModified":"2026-11-13T19:19:30.463","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.8,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:30.463","references":[{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-js/commit/e086dec7f9304107ef6d50b5877be88895c06aa7"},{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-js/releases/tag/experimental/v0.222.0"},{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-3v2p-hm54-8qcq"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-532"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128081.json b/data/2026/CVE-2026-128081.json
new file mode 100644
index 0000000000..6b06a2ef6d
--- /dev/null
+++ b/data/2026/CVE-2026-128081.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"AutoMapper","vendor":"LuckyPennySoftware","versions":[{"status":"affected","version":">= 16.0.0, < 16.3.0"},{"status":"affected","version":"< 15.1.4"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"AutoMapper is a convention-based object-object mapper in .NET. Prior to 15.1.4 and from 16.0.0 until 16.3.0, AutoMapper can recurse without an effective MaxDepth limit when mapping polymorphic graphs through Include or IncludeBase, runtime-typed object or interface members, nested Dictionary<string, object> or ExpandoObject sources, or recursive ConvertUsing type converters. Deep attacker-influenced graphs on these paths can throw an uncatchable StackOverflowException and terminate the process. This issue is fixed in versions 15.1.4 and 16.3.0."}],"id":"CVE-2026-128081","lastModified":"2026-11-13T19:19:30.603","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:30.603","references":[{"source":"security-advisories@github.com","url":"https://github.com/LuckyPennySoftware/AutoMapper/commit/aee81b50574c3c7005283cca2b2396e295bd8ed9"},{"source":"security-advisories@github.com","url":"https://github.com/LuckyPennySoftware/AutoMapper/commit/bdbbf5967d20d28e611ab65de1d96d1047a95ab9"},{"source":"security-advisories@github.com","url":"https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v15.1.4"},{"source":"security-advisories@github.com","url":"https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v16.3.0"},{"source":"security-advisories@github.com","url":"https://github.com/LuckyPennySoftware/AutoMapper/security/advisories/GHSA-gpwp-5797-mjff"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-674"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128082.json b/data/2026/CVE-2026-128082.json
new file mode 100644
index 0000000000..7dc81f172c
--- /dev/null
+++ b/data/2026/CVE-2026-128082.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"AutoMapper","vendor":"LuckyPennySoftware","versions":[{"status":"affected","version":">= 16.0.0, < 16.3.0"},{"status":"affected","version":"< 15.1.4"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"AutoMapper is a convention-based object-object mapper in .NET. Prior to 15.1.4 and from 16.0.0 until 16.3.0, AutoMapper increments type depth only after creating the destination, so recursive mapping performed through constructor parameters occurs before MaxDepth is counted. Destinations built through positional records or other constructors, and recursive ConstructUsing mappings that call context.Mapper, can therefore bypass explicit MaxDepth values and the default limit of 64. Deep attacker-influenced input can throw an uncatchable StackOverflowException and terminate the process. This issue is fixed in versions 15.1.4 and 16.3.0."}],"id":"CVE-2026-128082","lastModified":"2026-11-13T19:19:30.743","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:30.743","references":[{"source":"security-advisories@github.com","url":"https://github.com/LuckyPennySoftware/AutoMapper/commit/4d51a4b8125b4d2302f2f1f455747c9648ad1acb"},{"source":"security-advisories@github.com","url":"https://github.com/LuckyPennySoftware/AutoMapper/commit/639c2748cb9d3d07df8b86879ba7bcf211675c86"},{"source":"security-advisories@github.com","url":"https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v15.1.4"},{"source":"security-advisories@github.com","url":"https://github.com/LuckyPennySoftware/AutoMapper/releases/tag/v16.3.0"},{"source":"security-advisories@github.com","url":"https://github.com/LuckyPennySoftware/AutoMapper/security/advisories/GHSA-6vhm-j9h7-f9gh"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-674"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128083.json b/data/2026/CVE-2026-128083.json
new file mode 100644
index 0000000000..1f6f2789d4
--- /dev/null
+++ b/data/2026/CVE-2026-128083.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"framework","vendor":"laravel","versions":[{"status":"affected","version":">= 13.0.0, < 13.40.0"},{"status":"affected","version":"< 12.71.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Laravel is a web application framework. Prior to 12.71.0 and 13.40.0, Laravel's Concurrency::run process driver can treat a forged internal result message in child standard output as framework output. An application route must invoke Concurrency::run, and a task must write attacker-controlled bytes at the start of the child's standard output that form a complete JSON document followed by gzip magic bytes. Under those application-specific conditions, an attacker can forge the internal result message and achieve remote code execution. The affected behavior is not exposed by default and requires application code that routes untrusted input into task output. This issue is fixed in versions 12.71.0 and 13.40.0."}],"id":"CVE-2026-128083","lastModified":"2026-11-13T19:19:30.893","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.3,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:30.893","references":[{"source":"security-advisories@github.com","url":"https://github.com/laravel/framework/commit/0f904940d176d51db1105cc925136f01bb69e92c"},{"source":"security-advisories@github.com","url":"https://github.com/laravel/framework/commit/c37133b89b30a86eb404537151edd8944e938f0a"},{"source":"security-advisories@github.com","url":"https://github.com/laravel/framework/pull/62297"},{"source":"security-advisories@github.com","url":"https://github.com/laravel/framework/releases/tag/v12.71.0"},{"source":"security-advisories@github.com","url":"https://github.com/laravel/framework/releases/tag/v13.40.0"},{"source":"security-advisories@github.com","url":"https://github.com/laravel/framework/security/advisories/GHSA-63hm-g96r-2m2q"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128084.json b/data/2026/CVE-2026-128084.json
new file mode 100644
index 0000000000..4c847c2e76
--- /dev/null
+++ b/data/2026/CVE-2026-128084.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"sqlite3-ruby","vendor":"sparklemotion","versions":[{"status":"affected","version":"< 2.10.2"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"sqlite3 provides Ruby bindings for the SQLite3 embedded database. Prior to 2.10.2, sqlite3-ruby casts Ruby string lengths to int before passing SQL through Database#prepare, bound String or Blob values through Statement#bind_param, and String or Blob results from Ruby-defined SQL functions and aggregates through Database#create_function and Database#create_aggregate. On 64-bit platforms, a string of 4 GiB (2^32 bytes) or larger can wrap the length so SQLite processes only a prefix. A truncated SQL string can drop trailing clauses such as a WHERE condition, while a truncated bound value matters only when the application validated the full value before binding it. Exploitation requires the application and server to accept and retain the unusually large attacker-controlled string. If a dropped SQL clause contained a bind placeholder, binding raises SQLite3::RangeException instead of running the query. This issue is fixed in version 2.10.2."}],"id":"CVE-2026-128084","lastModified":"2026-11-13T19:19:31.050","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":2.5,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:31.050","references":[{"source":"security-advisories@github.com","url":"https://github.com/sparklemotion/sqlite3-ruby/commit/41059aa3ccc2c0f910d6df4fccfe36b3c3c6c649"},{"source":"security-advisories@github.com","url":"https://github.com/sparklemotion/sqlite3-ruby/pull/762"},{"source":"security-advisories@github.com","url":"https://github.com/sparklemotion/sqlite3-ruby/releases/tag/v2.10.2"},{"source":"security-advisories@github.com","url":"https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-4fqr-96q8-xrfx"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-681"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128085.json b/data/2026/CVE-2026-128085.json
new file mode 100644
index 0000000000..549826ed8b
--- /dev/null
+++ b/data/2026/CVE-2026-128085.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"opentelemetry-go","vendor":"open-telemetry","versions":[{"status":"affected","version":">= 0.9.0, < 1.47.0"}]},{"product":"go.opentelemetry.io/otel/sdk","vendor":"open-telemetry","versions":[{"status":"affected","version":">= 1.33.0, < 1.47.0"}]},{"product":"go.opentelemetry.io/otel/sdk","vendor":"open-telemetry","versions":[{"status":"affected","version":">= 0.9.0, < 1.47.0"}]},{"product":"go.opentelemetry.io/otel/sdk","vendor":"open-telemetry","versions":[{"status":"affected","version":">= 1.35.0, < 1.47.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. From SDK version 1.33.0, SDK log version 0.9.0, and trace version 1.35.0 until version 1.47.0, the AttributeValueLengthLimit and WithAttributeValueLengthLimit truncation paths in sdk/internal/attrnorm, sdk/log/internal/attrnorm, and trace/auto.go do not count valid U+FFFD replacement characters. This is a distinct incomplete-fix defect in the replacement truncation code introduced by the remediation for CVE-2026-81869. Values composed of or dominated by those characters can therefore exceed the configured character and memory bound in span, log-record, and auto-instrumentation trace attributes. Attacker-controlled telemetry attributes can increase retained memory and pipeline pressure, while confidentiality and integrity are not affected. This issue is fixed in version 1.47.0."}],"id":"CVE-2026-128085","lastModified":"2026-11-13T19:19:31.193","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:31.193","references":[{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-go/commit/017b08c7f1018b619991aaf6b2299d4beb9da1d3"},{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v1.47.0"},{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.47.0"},{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-go/releases/tag/trace/v1.47.0"},{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-q7gw-24fr-5p69"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-135"},{"lang":"en","value":"CWE-770"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128086.json b/data/2026/CVE-2026-128086.json
new file mode 100644
index 0000000000..e4459256d8
--- /dev/null
+++ b/data/2026/CVE-2026-128086.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"opentelemetry-go","vendor":"open-telemetry","versions":[{"status":"affected","version":">= 1.0.0-RC1, < 1.47.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.0.0-RC1 until version 1.47.0, baggage.Parse and propagation.Baggage.Extract eagerly materialize every W3C baggage property through parseMember, grow property slices, serialize members, and copy properties into internal/baggage.Item. A valid densely populated baggage header can therefore cause allocation traffic and retained memory disproportionate to its bounded input size. Remote impact requires baggage extraction to be enabled, attacker-controlled input to reach it, and extraction to run before authentication or on a public route; the evidence establishes increased allocation and garbage-collection pressure but not reliable process termination. This issue is fixed in version 1.47.0."}],"id":"CVE-2026-128086","lastModified":"2026-11-13T19:19:31.340","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:31.340","references":[{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-go/commit/f09d1de32f4ac7e5ef16394533721106b1a57b89"},{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-go/pull/9024"},{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.47.0"},{"source":"security-advisories@github.com","url":"https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-rrfc-gjm9-cgrj"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-405"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128087.json b/data/2026/CVE-2026-128087.json
new file mode 100644
index 0000000000..0dbec7dbad
--- /dev/null
+++ b/data/2026/CVE-2026-128087.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"russh","vendor":"Eugeny","versions":[{"status":"affected","version":">= 0.55.0, < 0.65.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From version 0.55.0 until version 0.65.1, the initial key exchange invokes client::Handler::kex_done() with the raw shared secret before check_server_key() accepts the server host key or certificate. A malicious SSH server can therefore trigger application-defined secondary-channel initialization or early data handling even when the server identity is subsequently rejected. Ordinary clients that keep the callback's no-op default or independently defer callback-derived actions until trust is confirmed are not affected. This issue is fixed in version 0.65.1."}],"id":"CVE-2026-128087","lastModified":"2026-11-13T19:19:31.600","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:31.477","references":[{"source":"security-advisories@github.com","url":"https://github.com/Eugeny/russh/commit/43a46d67a80a7355fcd2fb25e7e00d79aec8184c"},{"source":"security-advisories@github.com","url":"https://github.com/Eugeny/russh/pull/808"},{"source":"security-advisories@github.com","url":"https://github.com/Eugeny/russh/releases/tag/v0.65.1"},{"source":"security-advisories@github.com","url":"https://github.com/Eugeny/russh/security/advisories/GHSA-9264-jvgf-6w2f"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-696"},{"lang":"en","value":"CWE-863"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128088.json b/data/2026/CVE-2026-128088.json
new file mode 100644
index 0000000000..57ba42093b
--- /dev/null
+++ b/data/2026/CVE-2026-128088.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"russh","vendor":"Eugeny","versions":[{"status":"affected","version":">= 0.65.0, < 0.65.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to version 0.65.1, try_sign() captures an Arc<PrivateKey> before awaiting Agent::confirm() and does not revalidate the shared lock state or key presence after the await. This is a distinct residual defect in the remediation for CVE-2026-116794. A peer, including a remote SSH server using agent forwarding, can begin a confirmation-constrained signature request while the agent is unlocked and receive the signature after another connection locks the agent if the stale confirmation returns true. New post-lock requests are rejected and private key material is not disclosed, but the pending operation bypasses the current lock state. This issue is fixed in version 0.65.1."}],"id":"CVE-2026-128088","lastModified":"2026-11-13T19:19:31.743","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":2.2,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":0.8,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:31.630","references":[{"source":"security-advisories@github.com","url":"https://github.com/Eugeny/russh/commit/43a46d67a80a7355fcd2fb25e7e00d79aec8184c"},{"source":"security-advisories@github.com","url":"https://github.com/Eugeny/russh/pull/808"},{"source":"security-advisories@github.com","url":"https://github.com/Eugeny/russh/releases/tag/v0.65.1"},{"source":"security-advisories@github.com","url":"https://github.com/Eugeny/russh/security/advisories/GHSA-736f-c93q-9fwx"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-367"},{"lang":"en","value":"CWE-863"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128089.json b/data/2026/CVE-2026-128089.json
new file mode 100644
index 0000000000..d4bec86758
--- /dev/null
+++ b/data/2026/CVE-2026-128089.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"dnspython","vendor":"rthalley","versions":[{"status":"affected","version":"< 2.9.2"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"dnspython is a DNS toolkit for Python. Prior to version 2.9.2, the from_text() parser for WKS records does not require the service number to be between 0 and 65535 before using it as a bitmap offset. An attacker-controlled zone file can supply a larger number, causing the service bitmap to grow to an extremely large size through inefficient repeated extension, consuming excessive memory and CPU and potentially terminating the process. Applications are affected only when they parse zone-file text whose record type and rdata are attacker controlled. This issue is fixed in version 2.9.2."}],"id":"CVE-2026-128089","lastModified":"2026-11-13T20:18:55.913","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T20:18:55.913","references":[{"source":"security-advisories@github.com","url":"https://github.com/rthalley/dnspython/commit/388db14ee9923288f6e73f86e482c77706e59d73"},{"source":"security-advisories@github.com","url":"https://github.com/rthalley/dnspython/commit/a62e1be066da0ed71b5b59f37435bb17cfa0070f"},{"source":"security-advisories@github.com","url":"https://github.com/rthalley/dnspython/releases/tag/v2.9.2"},{"source":"security-advisories@github.com","url":"https://github.com/rthalley/dnspython/security/advisories/GHSA-vvf4-9x63-8xvv"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-770"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128100.json b/data/2026/CVE-2026-128100.json
new file mode 100644
index 0000000000..0e3439856e
--- /dev/null
+++ b/data/2026/CVE-2026-128100.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["64 bit","32 bit","x86","ARM","MacOS","Windows","Linux"],"product":"Vault","repo":"https://github.com/hashicorp/vault","vendor":"HashiCorp","versions":[{"lessThan":"2.2.2","status":"affected","version":"0.10.0","versionType":"semver"}]},{"defaultStatus":"unaffected","platforms":["64 bit","32 bit","x86","ARM","MacOS","Windows","Linux"],"product":"Vault Enterprise","repo":"https://github.com/hashicorp/vault","vendor":"HashiCorp","versions":[{"changes":[{"at":"1.19.25","status":"unaffected"},{"at":"1.20.0","status":"affected"},{"at":"1.21.14","status":"unaffected"},{"at":"2.0.0","status":"affected"}],"lessThan":"2.2.2","status":"affected","version":"0.10.0","versionType":"semver"}]}],"source":"security@hashicorp.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Vault Community Edition and Vault Enterprise did not apply explicit ACL policy deny rules to letter case variants of user and group names in auth methods that treat these names as case-insensitive. This may allow an authenticated user with delegated permissions to modify a protected user or group, potentially leading to privilege escalation. This vulnerability (CVE-2026-128100) is fixed in Vault Community Edition 2.2.2 and Vault Enterprise 2.2.2, 1.21.14, and 1.19.25."}],"id":"CVE-2026-128100","lastModified":"2026-11-13T20:18:56.070","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.2,"source":"security@hashicorp.com","type":"Secondary"}]},"published":"2026-11-13T20:18:56.070","references":[{"source":"security@hashicorp.com","url":"https://discuss.hashicorp.com/t/hcsec-2026-58-vault-vulnerable-to-acl-deny-bypass-via-case-variant-auth-method-user-and-group-names/78256"}],"sourceIdentifier":"security@hashicorp.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-178"}],"source":"security@hashicorp.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-128116.json b/data/2026/CVE-2026-128116.json
new file mode 100644
index 0000000000..eb31a15ae9
--- /dev/null
+++ b/data/2026/CVE-2026-128116.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"kit","vendor":"sveltejs","versions":[{"status":"affected","version":"< 2.70.4"},{"status":"affected","version":">= 3.0.0, < 3.1.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to versions 2.70.4 and 3.1.1, apps configured with router.resolution: 'server' could treat a pathname beginning with // as a protocol-relative module specifier during client-side navigation. A socially engineered link could therefore make server-side route resolution import and execute JavaScript from another origin in the user's browser. This issue is fixed in 2.70.4 and 3.1.1."}],"id":"CVE-2026-128116","lastModified":"2026-11-13T20:18:56.203","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.6,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T20:18:56.203","references":[{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/a8f7c1e09f13524d3b71d814bad9c15c9f33ef49"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/pull/17620"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.70.4"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/security/advisories/GHSA-rqp5-r3wg-vg35"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128117.json b/data/2026/CVE-2026-128117.json
new file mode 100644
index 0000000000..c553afd008
--- /dev/null
+++ b/data/2026/CVE-2026-128117.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"kit","vendor":"sveltejs","versions":[{"status":"affected","version":"< 2.70.4"},{"status":"affected","version":">= 3.0.0, < 3.1.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to versions 2.70.4 and 3.1.1, the reroute hook could rewrite an invalid percent-encoded pathname into a valid route and reach a comparison that decoded the original malformed pathname outside the guarded decoding operation. The resulting unhandled URIError could crash an adapter-node server and deny service to other requests. This issue is fixed in 2.70.4 and 3.1.1."}],"id":"CVE-2026-128117","lastModified":"2026-11-13T20:18:56.367","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T20:18:56.367","references":[{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/7993d5ebab017cb1be898a0b1c57371c5da06557"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/pull/17620"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.70.4"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/security/advisories/GHSA-mw6w-2fmv-pvw3"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-248"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128118.json b/data/2026/CVE-2026-128118.json
new file mode 100644
index 0000000000..839ea77688
--- /dev/null
+++ b/data/2026/CVE-2026-128118.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"kit","vendor":"sveltejs","versions":[{"status":"affected","version":">= 3.0.0, < 3.1.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From version 3.0.0 until 3.1.1, the build-time server-only module guard did not treat src/params.js as a client entry point even though parameter matchers can run in the browser. Server-only modules imported through src/params.js could consequently enter the client bundle, where statically replaced private environment values or other server secrets could be exposed. This issue is fixed in 3.1.1."}],"id":"CVE-2026-128118","lastModified":"2026-11-13T20:18:56.520","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T20:18:56.520","references":[{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/ae07803806f75b8b5662ae4ab92934ca1356fd84"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/security/advisories/GHSA-m9j8-jcmv-hp69"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-668"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128119.json b/data/2026/CVE-2026-128119.json
new file mode 100644
index 0000000000..9a35f54edf
--- /dev/null
+++ b/data/2026/CVE-2026-128119.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"kit","vendor":"sveltejs","versions":[{"status":"affected","version":">= 2.60.1, < 3.1.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From version 2.60.1 until 3.1.1, applications using the experimental remote functions flag could assign the same generated identifier to separate non-exported query.batch functions. When those private functions shared a request batch, arguments intended for one function could be passed to another function, causing unexpected cross-function processing and possible disclosure of function arguments. This issue is fixed in 3.1.1."}],"id":"CVE-2026-128119","lastModified":"2026-11-13T20:18:56.670","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T20:18:56.670","references":[{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/2c190febe78a15cac21be539ed9e99dc2d414b60"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/security/advisories/GHSA-6cf5-gc4q-fm3x"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128120.json b/data/2026/CVE-2026-128120.json
new file mode 100644
index 0000000000..b495798d35
--- /dev/null
+++ b/data/2026/CVE-2026-128120.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"kit","vendor":"sveltejs","versions":[{"status":"affected","version":">= 2.42.0, < 3.1.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From version 2.42.0 until 3.1.1, applications using the experimental remote functions flag and a remote form function could perform quadratic synchronous work while parsing a specially crafted request with many form entries. The parsing work could block the event loop for an extended period and deny service. This issue is fixed in 3.1.1."}],"id":"CVE-2026-128120","lastModified":"2026-11-13T20:18:56.817","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T20:18:56.817","references":[{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/24d8ee409d83c438330ff2850b4f159c1222aa27"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.1.1"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/security/advisories/GHSA-3r8g-jcqq-3p5j"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-407"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128121.json b/data/2026/CVE-2026-128121.json
new file mode 100644
index 0000000000..812e9e8d5c
--- /dev/null
+++ b/data/2026/CVE-2026-128121.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"kit","vendor":"sveltejs","versions":[{"status":"affected","version":"< 2.70.4"},{"status":"affected","version":">= 3.0.0-next.0, < 3.1.1"}]},{"product":"adapter-vercel","vendor":"@sveltejs","versions":[{"status":"affected","version":"< 6.3.5"},{"status":"affected","version":">= 7.0.0-next.0, < 7.0.2"}]},{"product":"adapter-static","vendor":"@sveltejs","versions":[{"status":"affected","version":"< 3.0.11"},{"status":"affected","version":">= 4.0.0-next.0, < 4.0.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to @sveltejs/adapter-vercel 6.3.5  and 7.0.2 and @sveltejs/adapter-static 3.0.11 and 4.0.1, an attacker-influenced link crawled during prerendering could be emitted into the generated Vercel routing configuration without escaping regular-expression metacharacters. The configuration could consequently interpret the path as regular-expression syntax, match unintended application paths, and expose content or behavior outside the intended path. This issue is fixed in @sveltejs/adapter-vercel 6.3.5  and 7.0.2 and @sveltejs/adapter-static 3.0.11 and 4.0.1."}],"id":"CVE-2026-128121","lastModified":"2026-11-13T20:18:56.970","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T20:18:56.970","references":[{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/2ed61a6aa3ac230b89e3528654c587847d1525a0"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/pull/17620"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-static@3.0.11"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-static@4.0.1"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-vercel@6.3.5"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-vercel@7.0.2"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/security/advisories/GHSA-jf9x-2fg2-hx4w"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-116"},{"lang":"en","value":"CWE-625"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128122.json b/data/2026/CVE-2026-128122.json
new file mode 100644
index 0000000000..31505927ef
--- /dev/null
+++ b/data/2026/CVE-2026-128122.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"kit","vendor":"sveltejs","versions":[{"status":"affected","version":">= 4.7.0, < 7.2.10"},{"status":"affected","version":">= 8.0.0-next.0, < 8.0.2"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From version 4.7.0 until versions 7.2.10 and 8.0.2, @sveltejs/adapter-cloudflare allowed an attacker-influenced link crawled during prerendering to place whitespace, control characters, wildcards, or placeholders into a prerendered redirect path. The adapter wrote those paths into the Cloudflare _redirects output without output-context validation, allowing a path to create unintended routing rules that could redirect or expose requests beyond the intended prerendered route. This issue is fixed in 7.2.10 and 8.0.2."}],"id":"CVE-2026-128122","lastModified":"2026-11-13T20:18:57.147","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T20:18:57.147","references":[{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/679e0d84ea9951bb4f1e458a599066b5a451b08a"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/pull/17620"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-cloudflare@7.2.10"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-cloudflare@8.0.2"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/security/advisories/GHSA-5wg4-q3ww-283h"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"},{"lang":"en","value":"CWE-93"},{"lang":"en","value":"CWE-116"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128123.json b/data/2026/CVE-2026-128123.json
new file mode 100644
index 0000000000..4314d43151
--- /dev/null
+++ b/data/2026/CVE-2026-128123.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"kit","vendor":"sveltejs","versions":[{"status":"affected","version":">= 3.0.0-next.0, < 3.1.1"},{"status":"affected","version":"< 2.70.4"}]},{"product":"adapter-node","vendor":"@sveltejs","versions":[{"status":"affected","version":">= 5.5.7, < 5.5.8"},{"status":"affected","version":">= 6.0.0-next.0, < 6.0.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From version 5.5.7 until versions 5.5.8 and 6.0.1, , @sveltejs/adapter-node can attempt to add a header to an immutable request in a context that causes the server to crash, denying service to any other requests routed to that server. This issue is fixed in 5.5.8 and 6.0.1."}],"id":"CVE-2026-128123","lastModified":"2026-11-13T20:18:57.300","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T20:18:57.300","references":[{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/04756a1f7a4f73e34f1934895340a46de84fc164"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/pull/17620"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-node@5.5.8"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/adapter-node@6.0.1"},{"source":"security-advisories@github.com","url":"https://github.com/sveltejs/kit/security/advisories/GHSA-rqw3-x7hx-mm3p"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-248"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-128239.json b/data/2026/CVE-2026-128239.json
index dee9aa8acd..a2f82460dc 100644
--- a/data/2026/CVE-2026-128239.json
+++ b/data/2026/CVE-2026-128239.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/gpac/gpac","product":"gpac","vendor":"gpac","versions":[{"lessThanOrEqual":"26.07.0","status":"affected","version":"0","versionType":"custom"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"GPAC through 26.07.0 contains a NULL pointer dereference vulnerability in the MPEG-4 Form spatial-constraint handlers in src/compositor/mpeg4_form.c that lets attackers crash the process via unchecked group lookups. Attackers can supply a crafted XMT scene whose Form constraints reference a non-existent group, crashing tools like MP4Box during chapter import for denial of service."}],"id":"CVE-2026-128239","lastModified":"2026-11-13T10:18:11.797","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:11.657","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/gpac/gpac"},{"source":"disclosure@vulncheck.com","url":"https://github.com/gpac/gpac/blob/v26.07.0/src/compositor/mpeg4_form.c#L620-L621"},{"source":"disclosure@vulncheck.com","url":"https://github.com/gpac/gpac/commit/bc416b997622e43de65afab3bae9b7d05d72f2b0"},{"source":"disclosure@vulncheck.com","url":"https://github.com/gpac/gpac/issues/4029"},{"source":"disclosure@vulncheck.com","url":"https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/221/221_ab_apply_compositor_mpeg4_form_c_627.xmt"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/gpac-through-26.07.0-null-pointer-dereference-via-mpeg-4-form-handlers"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-476"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/gpac/gpac","product":"gpac","vendor":"gpac","versions":[{"lessThanOrEqual":"26.07.0","status":"affected","version":"0","versionType":"custom"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"GPAC through 26.07.0 contains a NULL pointer dereference vulnerability in the MPEG-4 Form spatial-constraint handlers in src/compositor/mpeg4_form.c that lets attackers crash the process via unchecked group lookups. Attackers can supply a crafted XMT scene whose Form constraints reference a non-existent group, crashing tools like MP4Box during chapter import for denial of service."}],"id":"CVE-2026-128239","lastModified":"2026-11-13T19:19:31.780","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-128239","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:07:17.102783Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:11.657","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/gpac/gpac"},{"source":"disclosure@vulncheck.com","url":"https://github.com/gpac/gpac/blob/v26.07.0/src/compositor/mpeg4_form.c#L620-L621"},{"source":"disclosure@vulncheck.com","url":"https://github.com/gpac/gpac/commit/bc416b997622e43de65afab3bae9b7d05d72f2b0"},{"source":"disclosure@vulncheck.com","url":"https://github.com/gpac/gpac/issues/4029"},{"source":"disclosure@vulncheck.com","url":"https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/221/221_ab_apply_compositor_mpeg4_form_c_627.xmt"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/gpac-through-26.07.0-null-pointer-dereference-via-mpeg-4-form-handlers"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-476"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-128328.json b/data/2026/CVE-2026-128328.json
index d4b9bd0168..dc34d45b3b 100644
--- a/data/2026/CVE-2026-128328.json
+++ b/data/2026/CVE-2026-128328.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/Dokploy/dokploy","product":"dokploy","vendor":"Dokploy","versions":[{"lessThan":"0.31.1","status":"affected","version":"0.28.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization members to list tracked files of any git repository by supplying an arbitrary repoPath to patch.readRepoDirectories. Attackers with read access to one service can enumerate file and directory names of other tenants' application and compose source trees on the host or managed servers."}],"id":"CVE-2026-128328","lastModified":"2026-11-13T10:18:12.473","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.0,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}]},"published":"2026-11-13T10:18:12.340","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/blob/v0.31.0/apps/dokploy/server/api/routers/patch.ts#L181-L202"},{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/blob/v0.31.0/packages/server/src/services/patch-repo.ts#L84-L90"},{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/commit/4b582856b36a0d037ff43ecbed2026d93f22ecc6"},{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/pull/5899"},{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/releases/tag/v0.31.1"},{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/security/advisories/GHSA-q7cq-vxv7-449c"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/dokploy-0.28.0-before-0.31.1-path-traversal-via-patch-readrepodirectories-repopath"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"disclosure@vulncheck.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:github/Dokploy/dokploy","product":"dokploy","vendor":"Dokploy","versions":[{"lessThan":"0.31.1","status":"affected","version":"0.28.0","versionType":"semver"}]}],"source":"disclosure@vulncheck.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization members to list tracked files of any git repository by supplying an arbitrary repoPath to patch.readRepoDirectories. Attackers with read access to one service can enumerate file and directory names of other tenants' application and compose source trees on the host or managed servers."}],"id":"CVE-2026-128328","lastModified":"2026-11-13T19:19:31.910","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.0,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":1.4,"source":"disclosure@vulncheck.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"disclosure@vulncheck.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-128328","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:02:11.525523Z","version":"2.0.3"}}]},"published":"2026-11-13T10:18:12.340","references":[{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/blob/v0.31.0/apps/dokploy/server/api/routers/patch.ts#L181-L202"},{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/blob/v0.31.0/packages/server/src/services/patch-repo.ts#L84-L90"},{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/commit/4b582856b36a0d037ff43ecbed2026d93f22ecc6"},{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/pull/5899"},{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/releases/tag/v0.31.1"},{"source":"disclosure@vulncheck.com","url":"https://github.com/Dokploy/dokploy/security/advisories/GHSA-q7cq-vxv7-449c"},{"source":"disclosure@vulncheck.com","url":"https://www.vulncheck.com/advisories/dokploy-0.28.0-before-0.31.1-path-traversal-via-patch-readrepodirectories-repopath"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/Dokploy/dokploy/security/advisories/GHSA-q7cq-vxv7-449c"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"disclosure@vulncheck.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-128970.json b/data/2026/CVE-2026-128970.json
index 6e445f0094..e230b354fd 100644
--- a/data/2026/CVE-2026-128970.json
+++ b/data/2026/CVE-2026-128970.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["Psono Server Community Edition"],"product":"Psono","programFiles":["psono/restapi/serializers/delete_share_right.py"],"repo":"https://gitlab.com/esaqa/psono/psono-server","vendor":"esaqa GmbH","versions":[{"lessThan":"7.5.1","status":"affected","version":"1.12.6","versionType":"semver"}]},{"defaultStatus":"unaffected","modules":["Psono Server Enterprise Edition"],"product":"Psono","vendor":"esaqa GmbH","versions":[{"lessThan":"7.5.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"fdf66990-8419-4c8c-8848-ec15d75773b4"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Psono Server Community Edition versions 1.12.6 through 7.5.0 and Psono Server Enterprise Edition before 7.5.1 do not require accepted group membership when authorizing deletion of group share-rights. The DELETE /share/right/ endpoint checks for a membership matching the target group, the authenticated user, and share_admin=True, but omits accepted=True. An authenticated remote attacker who has been invited to a group with share-admin privileges, and who knows a group share-right UUID, can therefore delete that group's share-right record without accepting the invitation or after declining it. Pending invitations have accepted=None, while declined invitations retain accepted=False and the share_admin flag. Deletion revokes the group's access to the affected share and its contained secrets for all accepted group members, without deleting the underlying data or disclosing secret contents. The issue was fixed in version 7.5.1 of both editions, released on 2026-10-13."}],"id":"CVE-2026-128970","lastModified":"2026-11-13T15:17:45.027","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","type":"Secondary"}]},"published":"2026-11-13T15:17:45.027","references":[{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/esaqa/security-advisories/-/blob/master/advisories/CVE-2026-128970.md"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.5.0/psono/restapi/serializers/create_share_right.py"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.5.0/psono/restapi/serializers/delete_share_right.py"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.5.0/psono/restapi/views/membership_decline.py"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/commit/11f9aa69dae370cd4f0213f4d03d1b1cc4df36dd"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/commit/86e7ce7fdbb04fc4ae3430cc434179630948d48d"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/releases/v7.5.1"}],"sourceIdentifier":"fdf66990-8419-4c8c-8848-ec15d75773b4","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["Psono Server Community Edition"],"product":"Psono","programFiles":["psono/restapi/serializers/delete_share_right.py"],"repo":"https://gitlab.com/esaqa/psono/psono-server","vendor":"esaqa GmbH","versions":[{"lessThan":"7.5.1","status":"affected","version":"1.12.6","versionType":"semver"}]},{"defaultStatus":"unaffected","modules":["Psono Server Enterprise Edition"],"product":"Psono","vendor":"esaqa GmbH","versions":[{"lessThan":"7.5.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"fdf66990-8419-4c8c-8848-ec15d75773b4"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Psono Server Community Edition versions 1.12.6 through 7.5.0 and Psono Server Enterprise Edition before 7.5.1 do not require accepted group membership when authorizing deletion of group share-rights. The DELETE /share/right/ endpoint checks for a membership matching the target group, the authenticated user, and share_admin=True, but omits accepted=True. An authenticated remote attacker who has been invited to a group with share-admin privileges, and who knows a group share-right UUID, can therefore delete that group's share-right record without accepting the invitation or after declining it. Pending invitations have accepted=None, while declined invitations retain accepted=False and the share_admin flag. Deletion revokes the group's access to the affected share and its contained secrets for all accepted group members, without deleting the underlying data or disclosing secret contents. The issue was fixed in version 7.5.1 of both editions, released on 2026-10-13."}],"id":"CVE-2026-128970","lastModified":"2026-11-13T20:18:57.457","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-128970","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:53:45.836995Z","version":"2.0.3"}}]},"published":"2026-11-13T15:17:45.027","references":[{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/esaqa/security-advisories/-/blob/master/advisories/CVE-2026-128970.md"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.5.0/psono/restapi/serializers/create_share_right.py"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.5.0/psono/restapi/serializers/delete_share_right.py"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.5.0/psono/restapi/views/membership_decline.py"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/commit/11f9aa69dae370cd4f0213f4d03d1b1cc4df36dd"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/commit/86e7ce7fdbb04fc4ae3430cc434179630948d48d"},{"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","url":"https://gitlab.com/esaqa/psono/psono-server/-/releases/v7.5.1"}],"sourceIdentifier":"fdf66990-8419-4c8c-8848-ec15d75773b4","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"fdf66990-8419-4c8c-8848-ec15d75773b4","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-129217.json b/data/2026/CVE-2026-129217.json
new file mode 100644
index 0000000000..5353950c8f
--- /dev/null
+++ b/data/2026/CVE-2026-129217.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["bgpd"],"product":"FRRouting","programFiles":["bgpd/bgp_packet.c"],"programRoutines":[{"name":"bgp_notify_decapsulate_hard_reset()"}],"repo":"https://github.com/frrouting/frr.git","vendor":"FRRouting","versions":[{"lessThan":"10.5.2","status":"affected","version":"10.5.0","versionType":"semver"},{"lessThan":"10.4.3","status":"affected","version":"10.4.0","versionType":"semver"},{"lessThan":"10.3.4","status":"affected","version":"10.3","versionType":"custom"},{"lessThan":"10.2.6","status":"affected","version":"10.2","versionType":"custom"},{"lessThan":"10.1.5","status":"affected","version":"10.1","versionType":"custom"},{"lessThan":"10.0.5","status":"affected","version":"8.3","versionType":"custom"},{"lessThan":"8.3","status":"unaffected","version":"0","versionType":"custom"}]}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In FRRouting (FRR) 8.3 through 10.5.1, bgp_notify_decapsulate_hard_reset() in bgpd/bgp_packet.c does not validate the length of the data field of a received BGP NOTIFICATION Cease/Hard Reset message (RFC 8538). When the data field is exactly one byte long, the function reads one byte past the end of a heap buffer and the 16-bit length of the encapsulated data underflows to 65535, causing a 65535-byte out-of-bounds heap read followed by an assertion failure. A remote BGP peer that has established a session and negotiated the Graceful Restart capability with the Notification (N) bit can send such a message to crash the bgpd daemon, terminating all BGP sessions (denial of service). This is fixed in 10.0.5, 10.1.5, 10.2.6, 10.3.4, 10.4.3, 10.5.2 and 10.6.0."}],"id":"CVE-2026-129217","lastModified":"2026-11-13T19:19:32.050","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]},"published":"2026-11-13T19:19:32.050","references":[{"source":"57a55968-44ac-464c-a794-6ba3baad09c4","url":"https://github.com/FRRouting/frr/issues/20793"},{"source":"57a55968-44ac-464c-a794-6ba3baad09c4","url":"https://github.com/FRRouting/frr/pull/20796"}],"sourceIdentifier":"57a55968-44ac-464c-a794-6ba3baad09c4","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"},{"lang":"en","value":"CWE-191"}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-15309.json b/data/2026/CVE-2026-15309.json
index 206246372d..8ec45c89cc 100644
--- a/data/2026/CVE-2026-15309.json
+++ b/data/2026/CVE-2026-15309.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"CourseCure Courses","vendor":"WishList Member","versions":[{"lessThanOrEqual":"1.5.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajax_save_settings() function, which accepts arbitrary POST parameters and calls update_option() with attacker-controlled keys and values without any authorization verification. This makes it possible for authenticated attackers, with subscriber-level access and above, to elevate their privileges to administrator by setting the default_role WordPress option to 'administrator' and users_can_register to '1', then registering a new account that is automatically granted full administrator access."}],"id":"CVE-2026-15309","lastModified":"2026-11-12T12:18:24.040","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security@wordfence.com","type":"Primary"}]},"published":"2026-11-12T12:18:23.920","references":[{"source":"security@wordfence.com","url":"https://my.wishlistmember.com/changelog/coursecure-courses-1-5-3/"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d754689-0d64-4cb8-9c73-7dd6d4fb0c72?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"security@wordfence.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"CourseCure Courses","vendor":"WishList Member","versions":[{"lessThanOrEqual":"1.5.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajax_save_settings() function, which accepts arbitrary POST parameters and calls update_option() with attacker-controlled keys and values without any authorization verification. This makes it possible for authenticated attackers, with subscriber-level access and above, to elevate their privileges to administrator by setting the default_role WordPress option to 'administrator' and users_can_register to '1', then registering a new account that is automatically granted full administrator access."}],"id":"CVE-2026-15309","lastModified":"2026-11-13T19:19:32.200","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security@wordfence.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-15309","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:34:24.332689Z","version":"2.0.3"}}]},"published":"2026-11-12T12:18:23.920","references":[{"source":"security@wordfence.com","url":"https://my.wishlistmember.com/changelog/coursecure-courses-1-5-3/"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d754689-0d64-4cb8-9c73-7dd6d4fb0c72?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"security@wordfence.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-17140.json b/data/2026/CVE-2026-17140.json
index 922b55eaf0..49f2dfdae9 100644
--- a/data/2026/CVE-2026-17140.json
+++ b/data/2026/CVE-2026-17140.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:api_connect:12.1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:12.1.1.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:10.0.8.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:10.0.8.12:*:*:*:*:*:*:*"],"product":"API Connect","vendor":"IBM","versions":[{"lessThanOrEqual":"12.1.1.2","status":"affected","version":"12.1.0.0","versionType":"semver"},{"lessThanOrEqual":"10.0.8.12","status":"affected","version":"10.0.8.0","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. Input supplied by a user can influence code generated by the product, which could lead to code execution."}],"id":"CVE-2026-17140","lastModified":"2026-11-11T11:17:17.440","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.3,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.7,"impactScore":2.5,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-17140","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-09T04:55:19.256791Z","version":"2.0.3"}}]},"published":"2026-11-07T05:18:27.213","references":[{"source":"psirt@us.ibm.com","url":"https://www.ibm.com/support/pages/node/7295635"},{"source":"psirt@us.ibm.com","url":"https://www.ibm.com/support/pages/node/7295637"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:api_connect:12.1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:12.1.1.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:10.0.8.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:api_connect:10.0.8.12:*:*:*:*:*:*:*"],"product":"API Connect","vendor":"IBM","versions":[{"lessThanOrEqual":"12.1.1.2","status":"affected","version":"12.1.0.0","versionType":"semver"},{"lessThanOrEqual":"10.0.8.12","status":"affected","version":"10.0.8.0","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*","matchCriteriaId":"E68DE342-3A11-4B37-BFBA-520725CA5AAC","versionEndExcluding":"10.0.8.13","versionStartIncluding":"10.0.8.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*","matchCriteriaId":"4E7D2F8B-1E9C-4120-9990-5F5B5EE5C3AC","versionEndExcluding":"12.1.1.3","versionStartIncluding":"12.1.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. Input supplied by a user can influence code generated by the product, which could lead to code execution."}],"id":"CVE-2026-17140","lastModified":"2026-11-13T18:47:29.937","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.3,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.7,"impactScore":2.5,"source":"psirt@us.ibm.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-17140","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-09T04:55:19.256791Z","version":"2.0.3"}}]},"published":"2026-11-07T05:18:27.213","references":[{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/7295635"},{"source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/7295637"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-18379.json b/data/2026/CVE-2026-18379.json
index 5a607e2c24..314acd7bd7 100644
--- a/data/2026/CVE-2026-18379.json
+++ b/data/2026/CVE-2026-18379.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"yggdrasil-worker-package-manager","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.2.3-7.el10_2.9","versionType":"rpm"}]}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in yggdrasil-worker-package-manager. An authenticated attacker can exploit this issue to achieve arbitrary file modification or potential privilege escalation. The vulnerability exists because repository management operations fail to sanitize directory traversal sequences (such as '../') within repository names. By supplying a crafted repository name, an attacker can manipulate the root-level worker process into creating or deleting files outside the intended directory, compromising host system integrity."}],"id":"CVE-2026-18379","lastModified":"2026-11-13T00:20:14.900","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}]},"published":"2026-11-12T19:17:04.040","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:96082"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-18379"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546571"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"secalert@redhat.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"yggdrasil-worker-package-manager","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:0.2.3-7.el10_2.9","versionType":"rpm"}]}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in yggdrasil-worker-package-manager. An authenticated attacker can exploit this issue to achieve arbitrary file modification or potential privilege escalation. The vulnerability exists because repository management operations fail to sanitize directory traversal sequences (such as '../') within repository names. By supplying a crafted repository name, an attacker can manipulate the root-level worker process into creating or deleting files outside the intended directory, compromising host system integrity."}],"id":"CVE-2026-18379","lastModified":"2026-11-13T19:19:32.310","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-18379","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:06:54.607593Z","version":"2.0.3"}}]},"published":"2026-11-12T19:17:04.040","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:96082"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-18379"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546571"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"secalert@redhat.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-2950.json b/data/2026/CVE-2026-2950.json
index db87830054..0739bd8be1 100644
--- a/data/2026/CVE-2026-2950.json
+++ b/data/2026/CVE-2026-2950.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:npm/lodash","product":"lodash","vendor":"lodash","versions":[{"lessThan":"4.18.1","status":"affected","version":"4.17.23","versionType":"semver"},{"status":"unaffected","version":"4.18.1","versionType":"semver"}]},{"defaultStatus":"unaffected","packageURL":"pkg:npm/lodash-es","product":"lodash-es","vendor":"lodash","versions":[{"lessThan":"4.18.1","status":"affected","version":"4.17.23","versionType":"semver"},{"status":"unaffected","version":"4.18.1","versionType":"semver"}]},{"defaultStatus":"unaffected","packageURL":"pkg:npm/lodash-amd","product":"lodash-amd","vendor":"lodash","versions":[{"lessThan":"4.18.1","status":"affected","version":"4.17.23","versionType":"semver"},{"status":"unaffected","version":"4.18.1","versionType":"semver"}]},{"defaultStatus":"unaffected","packageURL":"pkg:npm/lodash.unset","product":"lodash.unset","vendor":"lodash","versions":[{"lessThan":"4.18.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.18.0","versionType":"semver"}]},{"defaultStatus":"unaffected","packageURL":"pkg:npm/lodash.omit","product":"lodash.omit","vendor":"lodash","versions":[{"lessThan":"4.18.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.18.0","versionType":"semver"}]}],"source":"ce714d77-add3-4f53-aff5-83d477b104bb"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:node.js:*:*","matchCriteriaId":"0F9E287B-784B-472D-9FA2-1469E4C8A810","versionEndExcluding":"4.17.23","versionStartIncluding":"4.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:lodash:lodash-amd:*:*:*:*:*:node.js:*:*","matchCriteriaId":"3A1B5527-B25F-49B8-A289-E964EFFCF4E4","versionEndExcluding":"4.17.23","versionStartIncluding":"4.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:lodash:lodash-es:*:*:*:*:*:node.js:*:*","matchCriteriaId":"4C20325C-6B92-4775-89D7-2650F158B622","versionEndExcluding":"4.17.23","versionStartIncluding":"4.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:lodash:lodash.unset:*:*:*:*:*:node.js:*:*","matchCriteriaId":"43DC850D-9F26-4445-BAB1-9AF9BA37095C","versionStartIncluding":"4.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. The fix for CVE-2025-13465 only guards against string key members, so an attacker can bypass the check by passing array-wrapped path segments. This allows deletion of properties from built-in prototypes such as Object.prototype, Number.prototype, and String.prototype. The issue permits deletion of prototype properties but does not allow overwriting their original behavior. The issue is patched from 4.18.0 to 4.18.1 depending on the package: lodash, lodash-es, and lodash-amd in 4.18.1, and the standalone lodash.unset and lodash.omit packages in 4.18.0."},{"lang":"es","value":"Impacto:\n\nLas versiones de Lodash 4.17.23 y anteriores son vulnerables a la contaminación de prototipos en las funciones _.unset y _.omit. La solución para (CVE-2025-13465: https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg) solo protege contra miembros de clave de tipo cadena, por lo que un atacante puede eludir la verificación pasando segmentos de ruta envueltos en arrays. Esto permite la eliminación de propiedades de prototipos incorporados como Object.prototype, Number.prototype y String.prototype.\n\nEl problema permite la eliminación de propiedades de prototipo, pero no permite sobrescribir su comportamiento original.\n\nParches:\n\nEste problema está parcheado en 4.18.0.\n\nSoluciones alternativas:\n\nNinguna. Actualice a la versión parcheada."}],"id":"CVE-2026-2950","lastModified":"2026-10-15T07:18:00.143","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"ce714d77-add3-4f53-aff5-83d477b104bb","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-2950","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-04-01T13:43:14.280375Z","version":"2.0.3"}}]},"published":"2026-03-31T20:16:26.207","references":[{"source":"ce714d77-add3-4f53-aff5-83d477b104bb","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"ce714d77-add3-4f53-aff5-83d477b104bb","url":"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh"}],"sourceIdentifier":"ce714d77-add3-4f53-aff5-83d477b104bb","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-1321"}],"source":"ce714d77-add3-4f53-aff5-83d477b104bb","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageURL":"pkg:npm/lodash","product":"lodash","vendor":"lodash","versions":[{"lessThan":"4.18.1","status":"affected","version":"4.17.23","versionType":"semver"},{"status":"unaffected","version":"4.18.1","versionType":"semver"}]},{"defaultStatus":"unaffected","packageURL":"pkg:npm/lodash-es","product":"lodash-es","vendor":"lodash","versions":[{"lessThan":"4.18.1","status":"affected","version":"4.17.23","versionType":"semver"},{"status":"unaffected","version":"4.18.1","versionType":"semver"}]},{"defaultStatus":"unaffected","packageURL":"pkg:npm/lodash-amd","product":"lodash-amd","vendor":"lodash","versions":[{"lessThan":"4.18.1","status":"affected","version":"4.17.23","versionType":"semver"},{"status":"unaffected","version":"4.18.1","versionType":"semver"}]},{"defaultStatus":"unaffected","packageURL":"pkg:npm/lodash.unset","product":"lodash.unset","vendor":"lodash","versions":[{"lessThan":"4.18.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.18.0","versionType":"semver"}]},{"defaultStatus":"unaffected","packageURL":"pkg:npm/lodash.omit","product":"lodash.omit","vendor":"lodash","versions":[{"lessThan":"4.18.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"4.18.0","versionType":"semver"}]}],"source":"ce714d77-add3-4f53-aff5-83d477b104bb"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:node.js:*:*","matchCriteriaId":"FED36A3D-5790-4B2D-B827-71E5454E5DBC","versionEndExcluding":"4.18.1","versionStartIncluding":"4.17.23","vulnerable":true},{"criteria":"cpe:2.3:a:lodash:lodash-amd:*:*:*:*:*:node.js:*:*","matchCriteriaId":"D02E7CE5-7A4F-4DC5-BC96-EED1E008F61F","versionEndExcluding":"4.18.1","versionStartIncluding":"4.17.23","vulnerable":true},{"criteria":"cpe:2.3:a:lodash:lodash-es:*:*:*:*:*:node.js:*:*","matchCriteriaId":"91574A92-44AA-4E8E-917B-9141C826DD61","versionEndExcluding":"4.18.1","versionStartIncluding":"4.17.23","vulnerable":true},{"criteria":"cpe:2.3:a:lodash:lodash.omit:*:*:*:*:*:node.js:*:*","matchCriteriaId":"5DAA3F51-5515-4FC3-87AD-90CEB94C7FAE","versionEndExcluding":"4.18.0","vulnerable":true},{"criteria":"cpe:2.3:a:lodash:lodash.unset:*:*:*:*:*:node.js:*:*","matchCriteriaId":"CED122B1-A240-406B-B79A-F37FC8245238","versionEndExcluding":"4.18.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. The fix for CVE-2025-13465 only guards against string key members, so an attacker can bypass the check by passing array-wrapped path segments. This allows deletion of properties from built-in prototypes such as Object.prototype, Number.prototype, and String.prototype. The issue permits deletion of prototype properties but does not allow overwriting their original behavior. The issue is patched from 4.18.0 to 4.18.1 depending on the package: lodash, lodash-es, and lodash-amd in 4.18.1, and the standalone lodash.unset and lodash.omit packages in 4.18.0."},{"lang":"es","value":"Impacto:\n\nLas versiones de Lodash 4.17.23 y anteriores son vulnerables a la contaminación de prototipos en las funciones _.unset y _.omit. La solución para (CVE-2025-13465: https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg) solo protege contra miembros de clave de tipo cadena, por lo que un atacante puede eludir la verificación pasando segmentos de ruta envueltos en arrays. Esto permite la eliminación de propiedades de prototipos incorporados como Object.prototype, Number.prototype y String.prototype.\n\nEl problema permite la eliminación de propiedades de prototipo, pero no permite sobrescribir su comportamiento original.\n\nParches:\n\nEste problema está parcheado en 4.18.0.\n\nSoluciones alternativas:\n\nNinguna. Actualice a la versión parcheada."}],"id":"CVE-2026-2950","lastModified":"2026-11-13T19:15:14.280","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"ce714d77-add3-4f53-aff5-83d477b104bb","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-2950","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-04-01T13:43:14.280375Z","version":"2.0.3"}}]},"published":"2026-03-31T20:16:26.207","references":[{"source":"ce714d77-add3-4f53-aff5-83d477b104bb","tags":["Vendor Advisory"],"url":"https://cna.openjsf.org/security-advisories.html"},{"source":"ce714d77-add3-4f53-aff5-83d477b104bb","tags":["Vendor Advisory"],"url":"https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh"}],"sourceIdentifier":"ce714d77-add3-4f53-aff5-83d477b104bb","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-1321"}],"source":"ce714d77-add3-4f53-aff5-83d477b104bb","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-40820.json b/data/2026/CVE-2026-40820.json
index 9cf0490b56..1dce26ee55 100644
--- a/data/2026/CVE-2026-40820.json
+++ b/data/2026/CVE-2026-40820.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"mbCONNECT24","vendor":"MB connect line","versions":[{"lessThanOrEqual":"2.20.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"mymbCONNECT24","vendor":"MB connect line","versions":[{"lessThanOrEqual":"2.20.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"mbCONNECT24","vendor":"MB connect line","versions":[{"status":"affected","version":"2.20.0"}]},{"defaultStatus":"unaffected","product":"mymbCONNECT24","vendor":"MB connect line","versions":[{"status":"affected","version":"2.20.0"}]},{"defaultStatus":"unaffected","product":"myREX24V2","vendor":"Helmholz","versions":[{"lessThanOrEqual":"2.20.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"myREX24V2.virtual","vendor":"Helmholz","versions":[{"lessThanOrEqual":"2.20.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"myREX24V2","vendor":"Helmholz","versions":[{"status":"affected","version":"2.20.0"}]},{"defaultStatus":"unaffected","product":"myREX24V2.virtual","vendor":"Helmholz","versions":[{"status":"affected","version":"2.20.0"}]}],"source":"info@cert.vde.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality."}],"id":"CVE-2026-40820","lastModified":"2026-11-12T20:07:11.090","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":3.6,"source":"info@cert.vde.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"info@cert.vde.com","type":"Secondary"}]},"published":"2026-11-12T08:16:41.760","references":[{"source":"info@cert.vde.com","url":"https://www.certvde.com/en/advisories/VDE-2026-044/"},{"source":"info@cert.vde.com","url":"https://www.certvde.com/en/advisories/VDE-2026-058/"}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"info@cert.vde.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"mbCONNECT24","vendor":"MB connect line","versions":[{"lessThanOrEqual":"2.20.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"mymbCONNECT24","vendor":"MB connect line","versions":[{"lessThanOrEqual":"2.20.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"mbCONNECT24","vendor":"MB connect line","versions":[{"status":"affected","version":"2.20.0"}]},{"defaultStatus":"unaffected","product":"mymbCONNECT24","vendor":"MB connect line","versions":[{"status":"affected","version":"2.20.0"}]},{"defaultStatus":"unaffected","product":"myREX24V2","vendor":"Helmholz","versions":[{"lessThanOrEqual":"2.20.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"myREX24V2.virtual","vendor":"Helmholz","versions":[{"lessThanOrEqual":"2.20.0","status":"affected","version":"1.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"myREX24V2","vendor":"Helmholz","versions":[{"status":"affected","version":"2.20.0"}]},{"defaultStatus":"unaffected","product":"myREX24V2.virtual","vendor":"Helmholz","versions":[{"status":"affected","version":"2.20.0"}]}],"source":"info@cert.vde.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality."}],"id":"CVE-2026-40820","lastModified":"2026-11-13T19:19:32.440","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":3.6,"source":"info@cert.vde.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"info@cert.vde.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-40820","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:31:54.821966Z","version":"2.0.3"}}]},"published":"2026-11-12T08:16:41.760","references":[{"source":"info@cert.vde.com","url":"https://www.certvde.com/en/advisories/VDE-2026-044/"},{"source":"info@cert.vde.com","url":"https://www.certvde.com/en/advisories/VDE-2026-058/"}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"info@cert.vde.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-43626.json b/data/2026/CVE-2026-43626.json
new file mode 100644
index 0000000000..740c525221
--- /dev/null
+++ b/data/2026/CVE-2026-43626.json
@@ -0,0 +1 @@
+{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority, replacedby CVE-2026-70640."}],"id":"CVE-2026-43626","lastModified":"2026-11-13T19:19:32.587","metrics":{},"published":"2026-11-13T19:19:32.587","references":[],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Rejected"}
diff --git a/data/2026/CVE-2026-45341.json b/data/2026/CVE-2026-45341.json
index ccfa37450e..70a1bd1187 100644
--- a/data/2026/CVE-2026-45341.json
+++ b/data/2026/CVE-2026-45341.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":">= 1.4.0, < 1.4.4"},{"status":"affected","version":">= 1.5.0, < 1.5.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.4, and 1.5.0 to before 1.5.1, a NULL pointer dereference can be triggered in bacnet_device_object_reference_decode() when a WriteProperty request updates OBJECT_STRUCTURED_VIEW / PROP_SUBORDINATE_LIST. This issue has been patched in versions 1.4.4 and 1.5.1."}],"id":"CVE-2026-45341","lastModified":"2026-11-12T22:09:39.233","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-12T20:18:38.667","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-fv2r-c2m2-7qhh"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-476"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":">= 1.4.0, < 1.4.4"},{"status":"affected","version":">= 1.5.0, < 1.5.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.4, and 1.5.0 to before 1.5.1, a NULL pointer dereference can be triggered in bacnet_device_object_reference_decode() when a WriteProperty request updates OBJECT_STRUCTURED_VIEW / PROP_SUBORDINATE_LIST. This issue has been patched in versions 1.4.4 and 1.5.1."}],"id":"CVE-2026-45341","lastModified":"2026-11-13T19:19:32.673","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-45341","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:10:04.812347Z","version":"2.0.3"}}]},"published":"2026-11-12T20:18:38.667","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-fv2r-c2m2-7qhh"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-fv2r-c2m2-7qhh"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-476"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-47217.json b/data/2026/CVE-2026-47217.json
index a0ee28ffea..e81ffd4d71 100644
--- a/data/2026/CVE-2026-47217.json
+++ b/data/2026/CVE-2026-47217.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.4.4"},{"status":"affected","version":"< 1.5.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, a remote attacker can trigger an uncontrolled recursion and stack overflow in the default server application of bacnet-stack by abusing the Channel object. This issue has been patched in versions 1.4.4 and 1.5.1."}],"id":"CVE-2026-47217","lastModified":"2026-11-12T22:09:39.233","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-12T20:18:39.770","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1345"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-wjw5-q9g6-2764"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-674"},{"lang":"en","value":"CWE-754"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.4.4"},{"status":"affected","version":"< 1.5.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, a remote attacker can trigger an uncontrolled recursion and stack overflow in the default server application of bacnet-stack by abusing the Channel object. This issue has been patched in versions 1.4.4 and 1.5.1."}],"id":"CVE-2026-47217","lastModified":"2026-11-13T19:19:32.780","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-47217","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:12:10.514079Z","version":"2.0.3"}}]},"published":"2026-11-12T20:18:39.770","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1345"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-wjw5-q9g6-2764"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-wjw5-q9g6-2764"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-674"},{"lang":"en","value":"CWE-754"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-47710.json b/data/2026/CVE-2026-47710.json
index a0fa6936e9..f5e2ec3eb1 100644
--- a/data/2026/CVE-2026-47710.json
+++ b/data/2026/CVE-2026-47710.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.4.4"},{"status":"affected","version":"< 1.5.1"},{"status":"affected","version":"< 1.6.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1.5.1, and 1.6.0, a stack-buffer-overflow can be triggered in the current master branch when a Loop object reads a referenced property through its default timer path and the referenced property is OBJECT_STRUCTURED_VIEW / PROP_DESCRIPTION containing a long attacker-controlled string. This issue has been patched in versions 1.4.4, 1.5.1, and 1.6.0."}],"id":"CVE-2026-47710","lastModified":"2026-11-12T22:09:39.233","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.2,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-12T20:18:40.747","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1355"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-2xm5-gjpc-9m6q"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"},{"lang":"en","value":"CWE-787"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.4.4"},{"status":"affected","version":"< 1.5.1"},{"status":"affected","version":"< 1.6.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4, 1.5.1, and 1.6.0, a stack-buffer-overflow can be triggered in the current master branch when a Loop object reads a referenced property through its default timer path and the referenced property is OBJECT_STRUCTURED_VIEW / PROP_DESCRIPTION containing a long attacker-controlled string. This issue has been patched in versions 1.4.4, 1.5.1, and 1.6.0."}],"id":"CVE-2026-47710","lastModified":"2026-11-13T20:18:58.537","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.2,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-47710","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:20:58.473668Z","version":"2.0.3"}}]},"published":"2026-11-12T20:18:40.747","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1355"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-2xm5-gjpc-9m6q"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-2xm5-gjpc-9m6q"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"},{"lang":"en","value":"CWE-787"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-59081.json b/data/2026/CVE-2026-59081.json
index ff1381753e..36a4f35ae1 100644
--- a/data/2026/CVE-2026-59081.json
+++ b/data/2026/CVE-2026-59081.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Edito CMS","vendor":"Edito","versions":[{"lessThan":"5.10.2607","status":"affected","version":"0","versionType":"semver"}]}],"source":"cvd@cert.pl"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Edito CMS deserializes JSON data without further validation. A user (even an administrator) cannot exploit this vulnerability through the application's normal functionality. An attacker who could modify cache entries or inject them could execute code on the server.\n\n\n\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released."}],"id":"CVE-2026-59081","lastModified":"2026-11-13T15:40:51.780","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.4,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cvd@cert.pl","type":"Secondary"}]},"published":"2026-11-13T08:17:18.353","references":[{"source":"cvd@cert.pl","url":"https://cert.pl/posts/2026/07/CVE-2026-59081"},{"source":"cvd@cert.pl","url":"https://www.edito.pl/"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"cvd@cert.pl","type":"Primary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Edito CMS","vendor":"Edito","versions":[{"lessThan":"5.10.2607","status":"affected","version":"0","versionType":"semver"}]}],"source":"cvd@cert.pl"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Edito CMS deserializes JSON data without further validation. A user (even an administrator) cannot exploit this vulnerability through the application's normal functionality. An attacker who could modify cache entries or inject them could execute code on the server.\n\n\n\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released."}],"id":"CVE-2026-59081","lastModified":"2026-11-13T20:18:59.560","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.4,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cvd@cert.pl","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-59081","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:28:41.220251Z","version":"2.0.3"}}]},"published":"2026-11-13T08:17:18.353","references":[{"source":"cvd@cert.pl","url":"https://cert.pl/posts/2026/07/CVE-2026-59081"},{"source":"cvd@cert.pl","url":"https://www.edito.pl/"}],"sourceIdentifier":"cvd@cert.pl","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"cvd@cert.pl","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-62975.json b/data/2026/CVE-2026-62975.json
new file mode 100644
index 0000000000..b4ebcb5954
--- /dev/null
+++ b/data/2026/CVE-2026-62975.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.5.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.5.1, the RAMFS-backed FILE implementation accepts AtomicWriteFile(record-access) requests that replace existing records with caller-controlled content. If a client replaces a record with shorter data, the backend can shrink the heap allocation and then continue processing with a trailing-copy length derived from the old layout. During that replace path, the RAMFS backend computes the trailing-copy length from the old file layout, then shrinks the heap allocation, and finally uses the stale length in memmove(). As a result, the source range of that memmove() can extend beyond the end of the reallocated heap buffer, producing a heap out-of-bounds read. This issue has been patched in versions 1.5.1 and 1.6.0."}],"id":"CVE-2026-62975","lastModified":"2026-11-13T19:19:32.980","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:32.980","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1408"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-cf8g-hp9m-9fvv"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-62976.json b/data/2026/CVE-2026-62976.json
new file mode 100644
index 0000000000..d52d0d1496
--- /dev/null
+++ b/data/2026/CVE-2026-62976.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.5.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.5.1, the RAMFS-backed FILE object implementation stores appended records as NUL-terminated strings, but its record-counting logic later walks the buffer as if an additional terminating empty record were present. As a result, two consecutive AtomicWriteFile(record-access) append requests can cause record_count() to call bacnet_strnlen() on a pointer that is already one byte past the end of the heap allocation. This issue has been patched in versions 1.5.1 and 1.6.0."}],"id":"CVE-2026-62976","lastModified":"2026-11-13T19:19:33.137","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:33.137","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1408"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-32jj-x86x-w98w"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-62977.json b/data/2026/CVE-2026-62977.json
new file mode 100644
index 0000000000..55e839cd40
--- /dev/null
+++ b/data/2026/CVE-2026-62977.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.5.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.5.1, the BACnet FILE object implementation allows remote WriteProperty(PROP_FILE_SIZE) requests to change the size of a stream-access FILE object without checking whether that FILE is marked Read_Only. When the FILE backend is RAMFS, enlarging the file only performs realloc() and updates the stored size; the newly exposed tail region is not initialized before later reads. As a result, a remote client can enlarge a read-only RAMFS-backed stream-access FILE and then immediately retrieve the newly exposed region with AtomicReadFile(stream-access). Depending on the allocator and build configuration, the returned data may contain sanitizer fill bytes, stale heap contents, or other unintended process memory. Shrinking the file through the same path can also remotely truncate content that was intended to be read-only. This issue has been patched in versions 1.5.1 and 1.6.0."}],"id":"CVE-2026-62977","lastModified":"2026-11-13T19:19:33.290","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:33.290","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1411"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-mwj7-2v5r-v934"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"},{"lang":"en","value":"CWE-908"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-64675.json b/data/2026/CVE-2026-64675.json
new file mode 100644
index 0000000000..0bc5719b54
--- /dev/null
+++ b/data/2026/CVE-2026-64675.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.4.5"},{"status":"affected","version":"< 1.5.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5 and 1.5.1, a single unauthenticated BACnet/IP UDP datagram (port 47808) triggers an out-of-bounds read in xy_color_decode() (src/bacnet/lighting.c), reachable pre-authentication through two default-registered service handlers: the UnconfirmedRequest WriteGroup service (0x0A) and Confirmed WriteProperty on a BACnetXYColor-typed property. This issue has been patched in versions 1.4.5, 1.5.1, and 1.6.0."}],"id":"CVE-2026-64675","lastModified":"2026-11-13T19:19:33.463","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:33.463","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1386"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1387"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-mmg6-p4pr-cj6h"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-65843.json b/data/2026/CVE-2026-65843.json
index 54fe7252a2..e03147bf3e 100644
--- a/data/2026/CVE-2026-65843.json
+++ b/data/2026/CVE-2026-65843.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"sync-rpc","vendor":"ForbesLindesay","versions":[{"status":"affected","version":"< 1.3.7"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"sync-rpc runs asynchronous commands synchronously by putting them in a separate proces. Prior to version 1.3.7, if an attacker could guess the correct port and it was not blocked via a firewall, it was possible to load and execute arbitrary JavaScript files stored on the server running sync-rpc. This issue has been patched in version 1.3.7."}],"id":"CVE-2026-65843","lastModified":"2026-11-12T22:18:51.470","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-11T19:17:44.120","references":[{"source":"security-advisories@github.com","url":"https://github.com/ForbesLindesay/sync-rpc/commit/ffccfe5bc39ad2e291a79c9e5afe6155ad311f07"},{"source":"security-advisories@github.com","url":"https://github.com/ForbesLindesay/sync-rpc/security/advisories/GHSA-2x86-cf3f-86gw"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"sync-rpc","vendor":"ForbesLindesay","versions":[{"status":"affected","version":"< 1.3.7"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"sync-rpc runs asynchronous commands synchronously by putting them in a separate proces. Prior to version 1.3.7, if an attacker could guess the correct port and it was not blocked via a firewall, it was possible to load and execute arbitrary JavaScript files stored on the server running sync-rpc. This issue has been patched in version 1.3.7."}],"id":"CVE-2026-65843","lastModified":"2026-11-13T19:19:33.627","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-65843","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:43:10.749587Z","version":"2.0.3"}}]},"published":"2026-11-11T19:17:44.120","references":[{"source":"security-advisories@github.com","url":"https://github.com/ForbesLindesay/sync-rpc/commit/ffccfe5bc39ad2e291a79c9e5afe6155ad311f07"},{"source":"security-advisories@github.com","url":"https://github.com/ForbesLindesay/sync-rpc/security/advisories/GHSA-2x86-cf3f-86gw"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-65965.json b/data/2026/CVE-2026-65965.json
index 2eb69596eb..1bacd37c2c 100644
--- a/data/2026/CVE-2026-65965.json
+++ b/data/2026/CVE-2026-65965.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"ideon","vendor":"3xpyth0n","versions":[{"status":"affected","version":"< 0.9.4"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api/projects/[id]/* resolve the caller's project role but never enforce it, so a user who was granted only the read-only viewer role on a project can perform write operations on that project. The most severe is POST /api/projects/[id]/graph, which deletes every block and link in the project and re-inserts client-supplied ones. A viewer can silently rewrite or wipe the entire canvas of a project they were invited to read. The application clearly intends viewer to be read-only: the collaborators endpoint, the automation endpoints, and the realtime Yjs sync path all reject write attempts from viewers. These specific HTTP handlers simply omit the guard their siblings enforce. This issue has been patched in version 0.9.4."}],"id":"CVE-2026-65965","lastModified":"2026-11-12T22:18:51.470","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-11T21:16:46.410","references":[{"source":"security-advisories@github.com","url":"https://github.com/3xpyth0n/ideon/commit/ed58ca7a70543c7fc4ebfef59a2ca34e480e44d1"},{"source":"security-advisories@github.com","url":"https://github.com/3xpyth0n/ideon/releases/tag/v0.9.4"},{"source":"security-advisories@github.com","url":"https://github.com/3xpyth0n/ideon/security/advisories/GHSA-v3qr-4v8m-29rh"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-285"},{"lang":"en","value":"CWE-862"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"ideon","vendor":"3xpyth0n","versions":[{"status":"affected","version":"< 0.9.4"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api/projects/[id]/* resolve the caller's project role but never enforce it, so a user who was granted only the read-only viewer role on a project can perform write operations on that project. The most severe is POST /api/projects/[id]/graph, which deletes every block and link in the project and re-inserts client-supplied ones. A viewer can silently rewrite or wipe the entire canvas of a project they were invited to read. The application clearly intends viewer to be read-only: the collaborators endpoint, the automation endpoints, and the realtime Yjs sync path all reject write attempts from viewers. These specific HTTP handlers simply omit the guard their siblings enforce. This issue has been patched in version 0.9.4."}],"id":"CVE-2026-65965","lastModified":"2026-11-13T19:19:33.740","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-65965","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:08:06.695074Z","version":"2.0.3"}}]},"published":"2026-11-11T21:16:46.410","references":[{"source":"security-advisories@github.com","url":"https://github.com/3xpyth0n/ideon/commit/ed58ca7a70543c7fc4ebfef59a2ca34e480e44d1"},{"source":"security-advisories@github.com","url":"https://github.com/3xpyth0n/ideon/releases/tag/v0.9.4"},{"source":"security-advisories@github.com","url":"https://github.com/3xpyth0n/ideon/security/advisories/GHSA-v3qr-4v8m-29rh"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/3xpyth0n/ideon/security/advisories/GHSA-v3qr-4v8m-29rh"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-285"},{"lang":"en","value":"CWE-862"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-65971.json b/data/2026/CVE-2026-65971.json
index 2d59f42f8f..34628a98de 100644
--- a/data/2026/CVE-2026-65971.json
+++ b/data/2026/CVE-2026-65971.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"livewire-powergrid","vendor":"Power-Components","versions":[{"status":"affected","version":">= 6.0.0, < 6.10.4"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version 6.10.4, the public Livewire property sortDirection is interpolated verbatim into a raw SQL ORDER BY clause and is not restricted to asc/desc, allowing arbitrary SQL injection through POST /livewire/update. This issue has been patched in version 6.10.4."}],"id":"CVE-2026-65971","lastModified":"2026-11-12T22:18:51.470","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.7,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-11T22:17:28.090","references":[{"source":"security-advisories@github.com","url":"https://github.com/Power-Components/livewire-powergrid/commit/13d047bf1637e82926e6914aa3ca0f29a4c9704a"},{"source":"security-advisories@github.com","url":"https://github.com/Power-Components/livewire-powergrid/releases/tag/v6.10.4"},{"source":"security-advisories@github.com","url":"https://github.com/Power-Components/livewire-powergrid/security/advisories/GHSA-7fgc-3h6c-698r"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"livewire-powergrid","vendor":"Power-Components","versions":[{"status":"affected","version":">= 6.0.0, < 6.10.4"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version 6.10.4, the public Livewire property sortDirection is interpolated verbatim into a raw SQL ORDER BY clause and is not restricted to asc/desc, allowing arbitrary SQL injection through POST /livewire/update. This issue has been patched in version 6.10.4."}],"id":"CVE-2026-65971","lastModified":"2026-11-13T19:19:33.860","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.7,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-65971","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:14:36.111855Z","version":"2.0.3"}}]},"published":"2026-11-11T22:17:28.090","references":[{"source":"security-advisories@github.com","url":"https://github.com/Power-Components/livewire-powergrid/commit/13d047bf1637e82926e6914aa3ca0f29a4c9704a"},{"source":"security-advisories@github.com","url":"https://github.com/Power-Components/livewire-powergrid/releases/tag/v6.10.4"},{"source":"security-advisories@github.com","url":"https://github.com/Power-Components/livewire-powergrid/security/advisories/GHSA-7fgc-3h6c-698r"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/Power-Components/livewire-powergrid/security/advisories/GHSA-7fgc-3h6c-698r"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-67444.json b/data/2026/CVE-2026-67444.json
new file mode 100644
index 0000000000..fe2e7ad3ea
--- /dev/null
+++ b/data/2026/CVE-2026-67444.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"hubleys-dashboard","vendor":"knrdl","versions":[{"status":"affected","version":"< 0.5.2"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Hubleys is a dashboard for self-hosted services. Prior to version 0.5.2, any authenticated (non-admin) Hubleys user can upload a file with an arbitrary extension as their dashboard \"background image,\" and the server will later serve that file back with a Content-Type derived straight from the attacker's chosen extension - so uploading an .html file gets it served as text/html. Because the endpoint that serves it returns a manually-constructed response rather than going through SvelteKit's normal page-rendering pipeline, the app's configured Content-Security-Policy never gets attached to it either, so a script embedded in the upload runs unrestricted. This issue has been patched in version 0.5.2."}],"id":"CVE-2026-67444","lastModified":"2026-11-13T19:19:34.503","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.1,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:34.503","references":[{"source":"security-advisories@github.com","url":"https://github.com/knrdl/hubleys-dashboard/commit/5a7f04c153295d48319d35fdd53e30f50288cd37"},{"source":"security-advisories@github.com","url":"https://github.com/knrdl/hubleys-dashboard/releases/tag/v0.5.2"},{"source":"security-advisories@github.com","url":"https://github.com/knrdl/hubleys-dashboard/security/advisories/GHSA-j2w9-hhqw-mrq8"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"},{"lang":"en","value":"CWE-434"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-67543.json b/data/2026/CVE-2026-67543.json
index 7aed1e22fb..dea60c6330 100644
--- a/data/2026/CVE-2026-67543.json
+++ b/data/2026/CVE-2026-67543.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"heym","vendor":"heymrun","versions":[{"status":"affected","version":"< 0.0.70"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, heym hardens one untrusted-code path but not its sibling. The Python tool executor (python_tool_executor.py) treats user code as untrusted and mandates a Docker sandbox (no network, read-only fs, non-root, no docker socket), failing closed. The skill executor (skill_python_executor.py) runs skill Python via a local backend subprocess with no Docker isolation — only a 512 MB RLIMIT and a 7-key env denylist — so a skill executes inside the backend execution context, with filesystem access, network egress, and non-denylisted environment variables that should not be exposed to untrusted/shared skills. In the shipped Docker config (backend runs as root + /var/run/docker.sock mounted), this escalates to host root. This issue has been patched in version 0.0.70."}],"id":"CVE-2026-67543","lastModified":"2026-11-11T22:17:29.140","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-11T22:17:28.997","references":[{"source":"security-advisories@github.com","url":"https://github.com/heymrun/heym/commit/2155057f4153a1e3a7b789d104f7fa96e92964e5"},{"source":"security-advisories@github.com","url":"https://github.com/heymrun/heym/commit/28bb2901e4dea128ac493f67ee9478d230b7a3d7"},{"source":"security-advisories@github.com","url":"https://github.com/heymrun/heym/releases/tag/0.0.70"},{"source":"security-advisories@github.com","url":"https://github.com/heymrun/heym/security/advisories/GHSA-hcv7-mg77-pg73"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"CWE-269"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"heym","vendor":"heymrun","versions":[{"status":"affected","version":"< 0.0.70"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, heym hardens one untrusted-code path but not its sibling. The Python tool executor (python_tool_executor.py) treats user code as untrusted and mandates a Docker sandbox (no network, read-only fs, non-root, no docker socket), failing closed. The skill executor (skill_python_executor.py) runs skill Python via a local backend subprocess with no Docker isolation — only a 512 MB RLIMIT and a 7-key env denylist — so a skill executes inside the backend execution context, with filesystem access, network egress, and non-denylisted environment variables that should not be exposed to untrusted/shared skills. In the shipped Docker config (backend runs as root + /var/run/docker.sock mounted), this escalates to host root. This issue has been patched in version 0.0.70."}],"id":"CVE-2026-67543","lastModified":"2026-11-13T19:19:34.640","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-67543","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:10:52.647642Z","version":"2.0.3"}}]},"published":"2026-11-11T22:17:28.997","references":[{"source":"security-advisories@github.com","url":"https://github.com/heymrun/heym/commit/2155057f4153a1e3a7b789d104f7fa96e92964e5"},{"source":"security-advisories@github.com","url":"https://github.com/heymrun/heym/commit/28bb2901e4dea128ac493f67ee9478d230b7a3d7"},{"source":"security-advisories@github.com","url":"https://github.com/heymrun/heym/releases/tag/0.0.70"},{"source":"security-advisories@github.com","url":"https://github.com/heymrun/heym/security/advisories/GHSA-hcv7-mg77-pg73"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/heymrun/heym/security/advisories/GHSA-hcv7-mg77-pg73"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"CWE-269"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-68507.json b/data/2026/CVE-2026-68507.json
index a0994873ba..6347e3a3be 100644
--- a/data/2026/CVE-2026-68507.json
+++ b/data/2026/CVE-2026-68507.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"ideon","vendor":"3xpyth0n","versions":[{"status":"affected","version":"< 0.9.5"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"ideon is a self-hosted visual workspace. Prior to version 0.9.5, ideon's link-preview endpoint requires no authentication at all and forwards any URL a caller supplies straight into a server-side fetch. The app does have a general-purpose SSRF guard (safeFetch/validateSafeUrl in src/app/lib/ssrf.ts), but this route sits behind no login check whatsoever, making it a fully open, anonymous URL-fetch relay - and the guard's IP blocklist itself has a gap that lets it reach the server's own loopback interface via the 0.0.0.0 \"any address\" bypass, a well-documented SSRF-filter evasion technique on Linux. This issue has been patched in version 0.9.5."}],"id":"CVE-2026-68507","lastModified":"2026-11-12T22:18:51.470","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-11T21:16:47.057","references":[{"source":"security-advisories@github.com","url":"https://github.com/3xpyth0n/ideon/releases/tag/v0.9.5"},{"source":"security-advisories@github.com","url":"https://github.com/3xpyth0n/ideon/security/advisories/GHSA-vpc2-r395-534p"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"},{"lang":"en","value":"CWE-918"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"ideon","vendor":"3xpyth0n","versions":[{"status":"affected","version":"< 0.9.5"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"ideon is a self-hosted visual workspace. Prior to version 0.9.5, ideon's link-preview endpoint requires no authentication at all and forwards any URL a caller supplies straight into a server-side fetch. The app does have a general-purpose SSRF guard (safeFetch/validateSafeUrl in src/app/lib/ssrf.ts), but this route sits behind no login check whatsoever, making it a fully open, anonymous URL-fetch relay - and the guard's IP blocklist itself has a gap that lets it reach the server's own loopback interface via the 0.0.0.0 \"any address\" bypass, a well-documented SSRF-filter evasion technique on Linux. This issue has been patched in version 0.9.5."}],"id":"CVE-2026-68507","lastModified":"2026-11-13T19:19:34.960","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-68507","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:47:26.116842Z","version":"2.0.3"}}]},"published":"2026-11-11T21:16:47.057","references":[{"source":"security-advisories@github.com","url":"https://github.com/3xpyth0n/ideon/releases/tag/v0.9.5"},{"source":"security-advisories@github.com","url":"https://github.com/3xpyth0n/ideon/security/advisories/GHSA-vpc2-r395-534p"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/3xpyth0n/ideon/security/advisories/GHSA-vpc2-r395-534p"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"},{"lang":"en","value":"CWE-918"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-68510.json b/data/2026/CVE-2026-68510.json
new file mode 100644
index 0000000000..0bb8297dc7
--- /dev/null
+++ b/data/2026/CVE-2026-68510.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"bit-vec","vendor":"contain-rs","versions":[{"status":"affected","version":"< 0.10.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"bit-vec is a compact vector of bits. Prior to version 0.10.0, there is undefined behavior if a user performs deserialize from an untrusted source and unsafe get_unchecked. A user of this library may be impacted by incorrect behavior if they perform deserialize from an untrusted source and run operations on the deserialized BitVec. This issue has been patched in version 0.10.0."}],"id":"CVE-2026-68510","lastModified":"2026-11-13T19:19:35.077","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:35.077","references":[{"source":"security-advisories@github.com","url":"https://github.com/contain-rs/bit-vec/pull/149"},{"source":"security-advisories@github.com","url":"https://github.com/contain-rs/bit-vec/security/advisories/GHSA-h4f4-f333-vh4h"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-68511.json b/data/2026/CVE-2026-68511.json
index db5910ac7b..437eebea5c 100644
--- a/data/2026/CVE-2026-68511.json
+++ b/data/2026/CVE-2026-68511.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"paaster","vendor":"WardPearce","versions":[{"status":"affected","version":"< 3.3.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Paaster is a pastebin application. Prior to version 3.3.0, Paaster's \"view once\" (burn-after-reading) paste mode can be bypassed with concurrent requests. The check that's supposed to enforce single-use is a plain read followed by a separate write, with no atomicity, so multiple simultaneous requests can all see the paste as \"not yet read\" and all successfully retrieve it. This issue has been patched in version 3.3.0."}],"id":"CVE-2026-68511","lastModified":"2026-11-12T22:18:51.470","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-11T22:17:30.013","references":[{"source":"security-advisories@github.com","url":"https://github.com/WardPearce/paaster/releases/tag/v3.3.0"},{"source":"security-advisories@github.com","url":"https://github.com/WardPearce/paaster/security/advisories/GHSA-xh42-5mjw-2f4v"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"paaster","vendor":"WardPearce","versions":[{"status":"affected","version":"< 3.3.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Paaster is a pastebin application. Prior to version 3.3.0, Paaster's \"view once\" (burn-after-reading) paste mode can be bypassed with concurrent requests. The check that's supposed to enforce single-use is a plain read followed by a separate write, with no atomicity, so multiple simultaneous requests can all see the paste as \"not yet read\" and all successfully retrieve it. This issue has been patched in version 3.3.0."}],"id":"CVE-2026-68511","lastModified":"2026-11-13T19:19:35.220","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-68511","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:19:46.265655Z","version":"2.0.3"}}]},"published":"2026-11-11T22:17:30.013","references":[{"source":"security-advisories@github.com","url":"https://github.com/WardPearce/paaster/releases/tag/v3.3.0"},{"source":"security-advisories@github.com","url":"https://github.com/WardPearce/paaster/security/advisories/GHSA-xh42-5mjw-2f4v"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/WardPearce/paaster/security/advisories/GHSA-xh42-5mjw-2f4v"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-68540.json b/data/2026/CVE-2026-68540.json
index 786092172d..fd3dabd4a6 100644
--- a/data/2026/CVE-2026-68540.json
+++ b/data/2026/CVE-2026-68540.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"product":"fulgur","vendor":"fulgur-rs","versions":[{"status":"affected","version":">= 0.6.0, < 0.33.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.6.0 to before version 0.33.0, quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements cause denial of service. This issue has been patched in version 0.33.0."}],"id":"CVE-2026-68540","lastModified":"2026-11-11T22:17:30.830","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-11T22:17:30.677","references":[{"source":"security-advisories@github.com","url":"https://github.com/fulgur-rs/fulgur/commit/8fabbca271313c56ef48f1d20d0040e1cf130de5"},{"source":"security-advisories@github.com","url":"https://github.com/fulgur-rs/fulgur/pull/602"},{"source":"security-advisories@github.com","url":"https://github.com/fulgur-rs/fulgur/releases/tag/v0.33.0"},{"source":"security-advisories@github.com","url":"https://github.com/fulgur-rs/fulgur/security/advisories/GHSA-v8x5-rchq-jr47"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-405"}],"source":"security-advisories@github.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"product":"fulgur","vendor":"fulgur-rs","versions":[{"status":"affected","version":">= 0.6.0, < 0.33.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.6.0 to before version 0.33.0, quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements cause denial of service. This issue has been patched in version 0.33.0."}],"id":"CVE-2026-68540","lastModified":"2026-11-13T19:19:35.333","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-68540","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:23:22.658791Z","version":"2.0.3"}}]},"published":"2026-11-11T22:17:30.677","references":[{"source":"security-advisories@github.com","url":"https://github.com/fulgur-rs/fulgur/commit/8fabbca271313c56ef48f1d20d0040e1cf130de5"},{"source":"security-advisories@github.com","url":"https://github.com/fulgur-rs/fulgur/pull/602"},{"source":"security-advisories@github.com","url":"https://github.com/fulgur-rs/fulgur/releases/tag/v0.33.0"},{"source":"security-advisories@github.com","url":"https://github.com/fulgur-rs/fulgur/security/advisories/GHSA-v8x5-rchq-jr47"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-405"}],"source":"security-advisories@github.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-68541.json b/data/2026/CVE-2026-68541.json
new file mode 100644
index 0000000000..efbc53c899
--- /dev/null
+++ b/data/2026/CVE-2026-68541.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"PolicyPress","vendor":"sc2in","versions":[{"status":"affected","version":"< 1.4.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"PolicyPress is a compliance policy management tool for small and mid-size teams. Prior to version 1.4.1, sensitive content is disclosed via CSS-only web redaction and insecure starter workflow defaults. This issue has been patched in version 1.4.1."}],"id":"CVE-2026-68541","lastModified":"2026-11-13T19:19:35.443","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":5.2,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:35.443","references":[{"source":"security-advisories@github.com","url":"https://github.com/sc2in/PolicyPress/commit/131de241014c17c30130d83151da840d005d55d8"},{"source":"security-advisories@github.com","url":"https://github.com/sc2in/PolicyPress/releases/tag/v1.4.1"},{"source":"security-advisories@github.com","url":"https://github.com/sc2in/PolicyPress/security/advisories/GHSA-j557-r6p7-8r3m"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-390"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-68551.json b/data/2026/CVE-2026-68551.json
new file mode 100644
index 0000000000..9d94d69a85
--- /dev/null
+++ b/data/2026/CVE-2026-68551.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"budget-board","vendor":"teelur","versions":[{"status":"affected","version":"< 3.6.2"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Budget Board is an app for tracking monthly spending and working towards financial goals. Prior to version 3.6.2, Budget Board's OIDC login flow finds and signs into an existing local account purely by matching the email address asserted in the identity provider's token - it never checks the standard email_verified claim. If the configured OIDC provider ever allows a user to register or display an email address without proving they own it , an attacker can register there using a victim's email and get signed into the victim's existing Budget Board account - including all their linked bank data. This issue has been patched in version 3.6.2."}],"id":"CVE-2026-68551","lastModified":"2026-11-13T20:19:00.750","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.3,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T20:19:00.750","references":[{"source":"security-advisories@github.com","url":"https://github.com/teelur/budget-board/commit/8c050368e6a01c72f41ab39be913fbf95f1cb253"},{"source":"security-advisories@github.com","url":"https://github.com/teelur/budget-board/pull/956"},{"source":"security-advisories@github.com","url":"https://github.com/teelur/budget-board/releases/tag/v3.6.2"},{"source":"security-advisories@github.com","url":"https://github.com/teelur/budget-board/security/advisories/GHSA-576g-r8m3-q9vp"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"CWE-345"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-68905.json b/data/2026/CVE-2026-68905.json
new file mode 100644
index 0000000000..b5e84f3486
--- /dev/null
+++ b/data/2026/CVE-2026-68905.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"hugo_blog","vendor":"lanshi17","versions":[{"status":"affected","version":"<= 744ca1563032e8a881390d3ed55d9a3ef2928502"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Hugo Blog is a tech blog site. In commit 744ca15 and prior, the AI assistant proxy exposes three HTTP endpoints (POST /api/blog-assistant, POST /api/blog-search-embedding, POST /api/blog-search-rerank) without any authentication check. When deployed following the documented Nginx reverse-proxy setup, any unauthenticated remote attacker can send arbitrary requests that the proxy forwards to the upstream LLM/embedding/rerank API using the operator's server-side API key (OPENAI_API_KEY / AI_SEARCH_API_KEY). This enables unlimited quota consumption, cost exhaustion, and potential service unavailability for the operator. At time of publication, there are no publicly available patches."}],"id":"CVE-2026-68905","lastModified":"2026-11-13T20:19:00.900","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.2,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T20:19:00.900","references":[{"source":"security-advisories@github.com","url":"https://github.com/lanshi17/hugo_blog/security/advisories/GHSA-pj75-r769-qjv2"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-71363.json b/data/2026/CVE-2026-71363.json
index 35c7487750..5721dd3dbf 100644
--- a/data/2026/CVE-2026-71363.json
+++ b/data/2026/CVE-2026-71363.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"ansible-automation-platform-26/controller-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"ansible-automation-platform-27/controller-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"automation-controller","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in AWX. The debug API endpoints (/api/debug/task_manager/, /api/debug/dependency_manager/, /api/debug/workflow_manager/) are registered unconditionally in the URL configuration and use AllowAny permission class with _ignore_model_permissions=True. This allows an unauthenticated remote attacker to repeatedly invoke scheduler operations that acquire database advisory locks and open transactions, potentially leading to resource exhaustion and degraded service availability."}],"id":"CVE-2026-71363","lastModified":"2026-11-12T18:17:53.420","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"secalert@redhat.com","type":"Primary"}]},"published":"2026-11-12T18:17:53.270","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-71363"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511899"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"secalert@redhat.com","type":"Primary"}]}
+{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"ansible-automation-platform-26/controller-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"ansible-automation-platform-27/controller-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"automation-controller","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in AWX. The debug API endpoints (/api/debug/task_manager/, /api/debug/dependency_manager/, /api/debug/workflow_manager/) are registered unconditionally in the URL configuration and use AllowAny permission class with _ignore_model_permissions=True. This allows an unauthenticated remote attacker to repeatedly invoke scheduler operations that acquire database advisory locks and open transactions, potentially leading to resource exhaustion and degraded service availability."}],"id":"CVE-2026-71363","lastModified":"2026-11-13T19:19:36.353","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-71363","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:54:43.688981Z","version":"2.0.3"}}]},"published":"2026-11-12T18:17:53.270","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-71363"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511899"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"secalert@redhat.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-82414.json b/data/2026/CVE-2026-82414.json
new file mode 100644
index 0000000000..e39b9337b7
--- /dev/null
+++ b/data/2026/CVE-2026-82414.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":">= 1.4.0, < 1.4.6"},{"status":"affected","version":">= 1.5.0, < 1.5.1"},{"status":"affected","version":">= 1.6.0, < 1.6.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.6, 1.5.0 to before 1.5.1, and 1.6.0 to before 1.6.1, the BACnet MS/TP receive path decodes COBS frames into an output pointer inside the same fixed input buffer, but passes the full input-buffer size as the decode capacity. A long valid COBS payload can therefore write past the end of the actual remaining buffer. This issue has been patched in versions 1.4.6, 1.5.1, 1.6.1, and 1.7.0."}],"id":"CVE-2026-82414","lastModified":"2026-11-13T19:19:36.740","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:19:36.740","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1425"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-8456-m9x4-j6mc"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/data/2026/CVE-2026-86322.json b/data/2026/CVE-2026-86322.json
index 17ad9ff855..cedd1200b9 100644
--- a/data/2026/CVE-2026-86322.json
+++ b/data/2026/CVE-2026-86322.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.16 for RHEL 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.12.0.26-1.el8sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.16 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.12.0.26-1.el9sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.14.0.26-1.el9sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.18::el9","cpe:/a:redhat:satellite_capsule:6.18::el9","cpe:/a:redhat:satellite_maintenance:6.18::el9","cpe:/a:redhat:satellite_utils:6.18::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.18 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.16.0.29-1.el9sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.19::el9","cpe:/a:redhat:satellite_capsule:6.19::el9","cpe:/a:redhat:satellite_utils:6.19::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.19 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.18.0.19-1.el9sat","versionType":"rpm"}]}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#find_user resolves the target account using User.find(params[:user_id]) without applying the required parent-user authorization check. An attacker with the create_personal_access_tokens permission can therefore invoke POST /api/v2/users/:user_id/personal_access_tokens with another user’s ID and create a Personal Access Token on their behalf. The resulting plaintext token is returned in the API response, while PersonalAccessToken#check_permissions_after_save only validates create_personal_access_tokens on the token and does not enforce edit_users authorization on the target user. The attacker can then use the forged token to authenticate as the victim, potentially resulting in complete account takeover, including administrator accounts."}],"id":"CVE-2026-86322","lastModified":"2026-11-13T17:17:35.363","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}]},"published":"2026-11-12T21:17:33.057","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:100120"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99949"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99950"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99952"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-86322"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529289"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"secalert@redhat.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.16 for RHEL 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.12.0.26-1.el8sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el9","cpe:/a:redhat:satellite_utils:6.16::el8","cpe:/a:redhat:satellite_utils:6.16::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.16 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.12.0.26-1.el9sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9","cpe:/a:redhat:satellite_maintenance:6.17::el9","cpe:/a:redhat:satellite_utils:6.17::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.14.0.26-1.el9sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.18::el9","cpe:/a:redhat:satellite_capsule:6.18::el9","cpe:/a:redhat:satellite_maintenance:6.18::el9","cpe:/a:redhat:satellite_utils:6.18::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.18 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.16.0.29-1.el9sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.19::el9","cpe:/a:redhat:satellite_capsule:6.19::el9","cpe:/a:redhat:satellite_utils:6.19::el9"],"defaultStatus":"affected","packageName":"foreman","product":"Red Hat Satellite 6.19 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.18.0.19-1.el9sat","versionType":"rpm"}]}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#find_user resolves the target account using User.find(params[:user_id]) without applying the required parent-user authorization check. An attacker with the create_personal_access_tokens permission can therefore invoke POST /api/v2/users/:user_id/personal_access_tokens with another user’s ID and create a Personal Access Token on their behalf. The resulting plaintext token is returned in the API response, while PersonalAccessToken#check_permissions_after_save only validates create_personal_access_tokens on the token and does not enforce edit_users authorization on the target user. The attacker can then use the forged token to authenticate as the victim, potentially resulting in complete account takeover, including administrator accounts."}],"id":"CVE-2026-86322","lastModified":"2026-11-13T20:19:01.047","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-86322","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:24:04.760721Z","version":"2.0.3"}}]},"published":"2026-11-12T21:17:33.057","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:100120"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99949"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99950"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99952"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-86322"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529289"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"secalert@redhat.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-95377.json b/data/2026/CVE-2026-95377.json
index 3e2c3c9540..4c7a9d8754 100644
--- a/data/2026/CVE-2026-95377.json
+++ b/data/2026/CVE-2026-95377.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["TFTP provisioning"],"packageName":"EdgeAudioClient","platforms":["Linux","ARM","32 bit"],"product":"VSFF6","vendor":"Zenitel","versions":[{"lessThan":"9.6.3.0","status":"affected","version":"0","versionType":"custom"},{"lessThan":"10.1.3.0","status":"affected","version":"10.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["TFTP provisioning"],"packageName":"EdgeAudioClient","platforms":["Linux","ARM","64 bit"],"product":"VSFF8","vendor":"Zenitel","versions":[{"lessThan":"9.6.3.0","status":"affected","version":"0","versionType":"custom"},{"lessThan":"10.1.3.0","status":"affected","version":"10.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["TFTP provisioning"],"packageName":"EdgeAudioClient","platforms":["Linux","ARM","64 bit"],"product":"VSFF8MP","vendor":"Zenitel","versions":[{"lessThan":"9.6.3.0","status":"affected","version":"0","versionType":"custom"},{"lessThan":"10.1.3.0","status":"affected","version":"10.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["TFTP provisioning"],"packageName":"EdgeAudioClient","platforms":["Linux","ARM","64 bit"],"product":"VSFF8MN","vendor":"Zenitel","versions":[{"lessThan":"9.6.3.0","status":"affected","version":"0","versionType":"custom"},{"lessThan":"10.1.3.0","status":"affected","version":"10.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["TFTP provisioning"],"packageName":"EdgeAudioClient","platforms":["Linux","ARM","32 bit"],"product":"VSFT","vendor":"Zenitel","versions":[{"lessThan":"9.6.3.0","status":"affected","version":"0","versionType":"custom"},{"lessThan":"10.1.3.0","status":"affected","version":"10.0.0.0","versionType":"custom"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OS command injection in the TFTP provisioning module of Zenitel EdgeAudioClient before 9.6.3.0, and 10.x before 10.1.3.0, on VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT devices allows unauthenticated adjacent attackers to execute arbitrary commands as root via a crafted DHCP option 66 (TFTP Server Name) value supplied by a rogue DHCP server on the same network segment. The DHCP-supplied value is passed to a shell without sanitization. Devices using DHCP, the default configuration, are affected on every boot and lease renewal.\n\n\n\nThe same injection is also reachable via the config_update_tftp_server and sw_update_tftp_server configuration fields by an attacker able to modify the device configuration."}],"id":"CVE-2026-95377","lastModified":"2026-11-13T16:19:37.337","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"YES","Recovery":"NOT_DEFINED","Safety":"PRESENT","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]},"published":"2026-11-13T16:19:37.337","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["TFTP provisioning"],"packageName":"EdgeAudioClient","platforms":["Linux","ARM","32 bit"],"product":"VSFF6","vendor":"Zenitel","versions":[{"lessThan":"9.6.3.0","status":"affected","version":"0","versionType":"custom"},{"lessThan":"10.1.3.0","status":"affected","version":"10.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["TFTP provisioning"],"packageName":"EdgeAudioClient","platforms":["Linux","ARM","64 bit"],"product":"VSFF8","vendor":"Zenitel","versions":[{"lessThan":"9.6.3.0","status":"affected","version":"0","versionType":"custom"},{"lessThan":"10.1.3.0","status":"affected","version":"10.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["TFTP provisioning"],"packageName":"EdgeAudioClient","platforms":["Linux","ARM","64 bit"],"product":"VSFF8MP","vendor":"Zenitel","versions":[{"lessThan":"9.6.3.0","status":"affected","version":"0","versionType":"custom"},{"lessThan":"10.1.3.0","status":"affected","version":"10.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["TFTP provisioning"],"packageName":"EdgeAudioClient","platforms":["Linux","ARM","64 bit"],"product":"VSFF8MN","vendor":"Zenitel","versions":[{"lessThan":"9.6.3.0","status":"affected","version":"0","versionType":"custom"},{"lessThan":"10.1.3.0","status":"affected","version":"10.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["TFTP provisioning"],"packageName":"EdgeAudioClient","platforms":["Linux","ARM","32 bit"],"product":"VSFT","vendor":"Zenitel","versions":[{"lessThan":"9.6.3.0","status":"affected","version":"0","versionType":"custom"},{"lessThan":"10.1.3.0","status":"affected","version":"10.0.0.0","versionType":"custom"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OS command injection in the TFTP provisioning module of Zenitel EdgeAudioClient before 9.6.3.0, and 10.x before 10.1.3.0, on VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT devices allows unauthenticated adjacent attackers to execute arbitrary commands as root via a crafted DHCP option 66 (TFTP Server Name) value supplied by a rogue DHCP server on the same network segment. The DHCP-supplied value is passed to a shell without sanitization. Devices using DHCP, the default configuration, are affected on every boot and lease renewal.\n\n\n\nThe same injection is also reachable via the config_update_tftp_server and sw_update_tftp_server configuration fields by an attacker able to modify the device configuration."}],"id":"CVE-2026-95377","lastModified":"2026-11-13T20:19:02.090","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"YES","Recovery":"NOT_DEFINED","Safety":"PRESENT","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-95377","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:51:26.769617Z","version":"2.0.3"}}]},"published":"2026-11-13T16:19:37.337","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-95378.json b/data/2026/CVE-2026-95378.json
index 1befd96c00..bf5171b9ee 100644
--- a/data/2026/CVE-2026-95378.json
+++ b/data/2026/CVE-2026-95378.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["Certificate upload"],"packageName":"turbineweb","platforms":["Linux","ARM","32 bit"],"product":"VSFF6","vendor":"Zenitel","versions":[{"lessThan":"10.1.3.0","status":"affected","version":"10.0.3.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["Certificate upload"],"packageName":"turbineweb","platforms":["Linux","ARM","64 bit"],"product":"VSFF8","vendor":"Zenitel","versions":[{"lessThan":"10.1.3.0","status":"affected","version":"10.0.3.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["Certificate upload"],"packageName":"turbineweb","platforms":["Linux","ARM","64 bit"],"product":"VSFF8MP","vendor":"Zenitel","versions":[{"lessThan":"10.1.3.0","status":"affected","version":"10.0.3.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["Certificate upload"],"packageName":"turbineweb","platforms":["Linux","ARM","64 bit"],"product":"VSFF8MN","vendor":"Zenitel","versions":[{"lessThan":"10.1.3.0","status":"affected","version":"10.0.3.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["Certificate upload"],"packageName":"turbineweb","platforms":["Linux","ARM","32 bit"],"product":"VSFT","vendor":"Zenitel","versions":[{"lessThan":"10.1.3.0","status":"affected","version":"10.0.3.0","versionType":"custom"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Path traversal in the certificate upload endpoint (/api/certificate/upload) of the turbineweb web interface in Zenitel VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT devices with software versions from 10.0.3.0 before 10.1.3.0 allows authenticated administrators to write arbitrary files as root via a crafted filename parameter in a multipart upload request when the type field is set to any value other than https_certificate. In that case, both path validation and certificate content validation are skipped.\n\n\n\nThis can be escalated to arbitrary code execution as root, for example by overwriting startup scripts or planting SSH keys."}],"id":"CVE-2026-95378","lastModified":"2026-11-13T16:19:37.510","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"PRESENT","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]},"published":"2026-11-13T16:19:37.510","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"},{"lang":"en","value":"CWE-434"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["Certificate upload"],"packageName":"turbineweb","platforms":["Linux","ARM","32 bit"],"product":"VSFF6","vendor":"Zenitel","versions":[{"lessThan":"10.1.3.0","status":"affected","version":"10.0.3.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["Certificate upload"],"packageName":"turbineweb","platforms":["Linux","ARM","64 bit"],"product":"VSFF8","vendor":"Zenitel","versions":[{"lessThan":"10.1.3.0","status":"affected","version":"10.0.3.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["Certificate upload"],"packageName":"turbineweb","platforms":["Linux","ARM","64 bit"],"product":"VSFF8MP","vendor":"Zenitel","versions":[{"lessThan":"10.1.3.0","status":"affected","version":"10.0.3.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["Certificate upload"],"packageName":"turbineweb","platforms":["Linux","ARM","64 bit"],"product":"VSFF8MN","vendor":"Zenitel","versions":[{"lessThan":"10.1.3.0","status":"affected","version":"10.0.3.0","versionType":"custom"}]},{"defaultStatus":"unaffected","modules":["Certificate upload"],"packageName":"turbineweb","platforms":["Linux","ARM","32 bit"],"product":"VSFT","vendor":"Zenitel","versions":[{"lessThan":"10.1.3.0","status":"affected","version":"10.0.3.0","versionType":"custom"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Path traversal in the certificate upload endpoint (/api/certificate/upload) of the turbineweb web interface in Zenitel VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT devices with software versions from 10.0.3.0 before 10.1.3.0 allows authenticated administrators to write arbitrary files as root via a crafted filename parameter in a multipart upload request when the type field is set to any value other than https_certificate. In that case, both path validation and certificate content validation are skipped.\n\n\n\nThis can be escalated to arbitrary code execution as root, for example by overwriting startup scripts or planting SSH keys."}],"id":"CVE-2026-95378","lastModified":"2026-11-13T20:19:03.120","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"PRESENT","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-95378","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:52:26.219395Z","version":"2.0.3"}}]},"published":"2026-11-13T16:19:37.510","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"},{"lang":"en","value":"CWE-434"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-95613.json b/data/2026/CVE-2026-95613.json
index 4f4509c60b..ce675c1ee3 100644
--- a/data/2026/CVE-2026-95613.json
+++ b/data/2026/CVE-2026-95613.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Zenitel Connect","vendor":"Zenitel","versions":[{"lessThan":"1.11.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The pREST database REST API in Zenitel Connect firmware before 1.11.0 signs and verifies JWTs with the platform CA private key, which is stored on a data volume shared between containers, and sets the PostgreSQL session role from the unvalidated sub claim of each request while connected to the database as the \"postgres\" superuser, which allows local attackers who can read the platform CA private key from the container filesystem to execute database operations as the PostgreSQL superuser, including reading the master encryption key and password hashes, via a forged JWT with sub=postgres sent to the pREST API."}],"id":"CVE-2026-95613","lastModified":"2026-11-13T16:19:38.717","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]},"published":"2026-11-13T16:19:38.717","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-250"},{"lang":"en","value":"CWE-266"},{"lang":"en","value":"CWE-653"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Zenitel Connect","vendor":"Zenitel","versions":[{"lessThan":"1.11.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The pREST database REST API in Zenitel Connect firmware before 1.11.0 signs and verifies JWTs with the platform CA private key, which is stored on a data volume shared between containers, and sets the PostgreSQL session role from the unvalidated sub claim of each request while connected to the database as the \"postgres\" superuser, which allows local attackers who can read the platform CA private key from the container filesystem to execute database operations as the PostgreSQL superuser, including reading the master encryption key and password hashes, via a forged JWT with sub=postgres sent to the pREST API."}],"id":"CVE-2026-95613","lastModified":"2026-11-13T20:19:04.253","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-95613","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:52:39.915721Z","version":"2.0.3"}}]},"published":"2026-11-13T16:19:38.717","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-250"},{"lang":"en","value":"CWE-266"},{"lang":"en","value":"CWE-653"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-95614.json b/data/2026/CVE-2026-95614.json
index b33b7c7bef..07bea921e8 100644
--- a/data/2026/CVE-2026-95614.json
+++ b/data/2026/CVE-2026-95614.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Zenitel Connect","vendor":"Zenitel","versions":[{"lessThan":"1.11.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The host configuration watcher in Zenitel Connect before 1.11.0 applies a rsyslog configuration file written to a data volume that is shared with the hiatus application container, which allows local attackers with write access to the hiatus container filesystem to execute arbitrary OS commands as root on the host operating system via a crafted rsyslog configuration file."}],"id":"CVE-2026-95614","lastModified":"2026-11-13T16:19:38.853","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]},"published":"2026-11-13T16:19:38.853","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-15"},{"lang":"en","value":"CWE-653"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Zenitel Connect","vendor":"Zenitel","versions":[{"lessThan":"1.11.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The host configuration watcher in Zenitel Connect before 1.11.0 applies a rsyslog configuration file written to a data volume that is shared with the hiatus application container, which allows local attackers with write access to the hiatus container filesystem to execute arbitrary OS commands as root on the host operating system via a crafted rsyslog configuration file."}],"id":"CVE-2026-95614","lastModified":"2026-11-13T20:19:05.260","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-95614","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:51:38.523906Z","version":"2.0.3"}}]},"published":"2026-11-13T16:19:38.853","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-15"},{"lang":"en","value":"CWE-653"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-95615.json b/data/2026/CVE-2026-95615.json
index a772b85779..b9a5624096 100644
--- a/data/2026/CVE-2026-95615.json
+++ b/data/2026/CVE-2026-95615.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Zenitel Connect","vendor":"Zenitel","versions":[{"lessThan":"1.11.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OS command injection vulnerability in audio messages API in Zenitel Connect before 1.11.0 allows remote authenticated users to execute arbitrary OS commands as root in the hiatus application container via filename parameter to the /api/system/audio_messages endpoint."}],"id":"CVE-2026-95615","lastModified":"2026-11-13T16:19:38.987","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]},"published":"2026-11-13T16:19:38.987","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Zenitel Connect","vendor":"Zenitel","versions":[{"lessThan":"1.11.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"OS command injection vulnerability in audio messages API in Zenitel Connect before 1.11.0 allows remote authenticated users to execute arbitrary OS commands as root in the hiatus application container via filename parameter to the /api/system/audio_messages endpoint."}],"id":"CVE-2026-95615","lastModified":"2026-11-13T20:19:06.267","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-95615","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T19:51:50.060942Z","version":"2.0.3"}}]},"published":"2026-11-13T16:19:38.987","references":[{"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"}],"sourceIdentifier":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-95922.json b/data/2026/CVE-2026-95922.json
index f6b485e521..c5a1e7d995 100644
--- a/data/2026/CVE-2026-95922.json
+++ b/data/2026/CVE-2026-95922.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-95922","lastModified":"2026-11-11T01:17:28.857","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.0,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-95922","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:32:11.612656Z","version":"2.0.3"}}]},"published":"2026-11-10T19:21:45.267","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95922"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"secure@microsoft.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Microsoft Office 365 for Mac","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Microsoft Office for Android","vendor":"Microsoft","versions":[{"lessThan":"16.0.20625.20014","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2021","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2024","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-95922","lastModified":"2026-11-13T19:19:46.740","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.0,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-95922","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:32:11.612656Z","version":"2.0.3"}}]},"published":"2026-11-10T19:21:45.267","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95922"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"secure@microsoft.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-95932.json b/data/2026/CVE-2026-95932.json
index c13beb4c5b..5c90611d24 100644
--- a/data/2026/CVE-2026-95932.json
+++ b/data/2026/CVE-2026-95932.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-95932","lastModified":"2026-11-11T01:17:29.190","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-95932","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:32:00.954822Z","version":"2.0.3"}}]},"published":"2026-11-10T19:21:45.663","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95932"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-829"}],"source":"secure@microsoft.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Microsoft Office 365 for Mac","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Microsoft Office for Android","vendor":"Microsoft","versions":[{"lessThan":"16.0.20625.20014","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2021","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2024","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-95932","lastModified":"2026-11-13T19:19:47.020","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-95932","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:32:00.954822Z","version":"2.0.3"}}]},"published":"2026-11-10T19:21:45.663","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95932"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-829"}],"source":"secure@microsoft.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-95942.json b/data/2026/CVE-2026-95942.json
index 8745bf9161..5b5ea49043 100644
--- a/data/2026/CVE-2026-95942.json
+++ b/data/2026/CVE-2026-95942.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-95942","lastModified":"2026-11-11T01:17:30.063","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-95942","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:31:35.286650Z","version":"2.0.3"}}]},"published":"2026-11-10T19:21:46.600","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95942"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"secure@microsoft.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Microsoft Office 365 for Mac","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"1.0.0","versionType":"custom"}]},{"product":"Microsoft Office for Android","vendor":"Microsoft","versions":[{"lessThan":"16.0.20625.20014","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2021","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.1","versionType":"custom"}]},{"product":"Microsoft Office LTSC for Mac 2024","vendor":"Microsoft","versions":[{"lessThan":"16.115.26110837","status":"affected","version":"16.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-95942","lastModified":"2026-11-13T19:19:47.587","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-95942","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:31:35.286650Z","version":"2.0.3"}}]},"published":"2026-11-10T19:21:46.600","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95942"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"secure@microsoft.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-96126.json b/data/2026/CVE-2026-96126.json
index fddac65b95..597cc57369 100644
--- a/data/2026/CVE-2026-96126.json
+++ b/data/2026/CVE-2026-96126.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-96126","lastModified":"2026-11-11T01:17:41.587","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-96126","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:25:26.082099Z","version":"2.0.3"}}]},"published":"2026-11-10T19:22:10.000","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96126"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"secure@microsoft.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Microsoft Office for Android","vendor":"Microsoft","versions":[{"lessThan":"16.0.20625.20014","status":"affected","version":"16.0.1","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally."}],"id":"CVE-2026-96126","lastModified":"2026-11-13T19:19:57.927","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-96126","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:25:26.082099Z","version":"2.0.3"}}]},"published":"2026-11-10T19:22:10.000","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96126"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"secure@microsoft.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-96144.json b/data/2026/CVE-2026-96144.json
index db9c678124..1f91cbe966 100644
--- a/data/2026/CVE-2026-96144.json
+++ b/data/2026/CVE-2026-96144.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally."}],"id":"CVE-2026-96144","lastModified":"2026-11-11T02:17:22.740","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.0,"impactScore":3.6,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-96144","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T01:15:36.525286Z","version":"2.0.3"}}]},"published":"2026-11-10T19:22:11.860","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96144"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-908"}],"source":"secure@microsoft.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"product":"Microsoft Office for Android","vendor":"Microsoft","versions":[{"lessThan":"16.0.20625.20014","status":"affected","version":"16.0.1","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2022","vendor":"Microsoft","versions":[{"lessThan":"10.0.20348.5870","status":"affected","version":"10.0.20348.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally."}],"id":"CVE-2026-96144","lastModified":"2026-11-13T19:19:58.683","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.0,"impactScore":3.6,"source":"secure@microsoft.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-96144","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-11T01:15:36.525286Z","version":"2.0.3"}}]},"published":"2026-11-10T19:22:11.860","references":[{"source":"secure@microsoft.com","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96144"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-908"}],"source":"secure@microsoft.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-97357.json b/data/2026/CVE-2026-97357.json
index 428f6c7f1c..532eb4025a 100644
--- a/data/2026/CVE-2026-97357.json
+++ b/data/2026/CVE-2026-97357.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"SpaceCom","vendor":"B. Braun Melsungen AG","versions":[{"lessThanOrEqual":"U/L94","status":"affected","version":"0","versionType":"custom"}]}],"source":"productsecurity@bbraun.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An Out-Of-Bounds Write due to missing input validation is possible in the autoprogramming interface of SpaceCom and Space Battery pack with WiFi which could lead to a denial of service of the affected communication device."}],"id":"CVE-2026-97357","lastModified":"2026-11-13T18:17:49.977","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"productsecurity@bbraun.com","type":"Secondary"}]},"published":"2026-11-13T18:17:49.977","references":[{"source":"productsecurity@bbraun.com","url":"https://https://www.bbraunusa.com/productsecurity"},{"source":"productsecurity@bbraun.com","url":"https://www.bbraun.com/productsecurity"}],"sourceIdentifier":"productsecurity@bbraun.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"productsecurity@bbraun.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"SpaceCom","vendor":"B. Braun Melsungen AG","versions":[{"lessThanOrEqual":"U/L94","status":"affected","version":"0","versionType":"custom"}]}],"source":"productsecurity@bbraun.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An Out-Of-Bounds Write due to missing input validation is possible in the autoprogramming interface of SpaceCom and Space Battery pack with WiFi which could lead to a denial of service of the affected communication device."}],"id":"CVE-2026-97357","lastModified":"2026-11-13T20:19:07.270","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"productsecurity@bbraun.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-97357","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:31:52.934925Z","version":"2.0.3"}}]},"published":"2026-11-13T18:17:49.977","references":[{"source":"productsecurity@bbraun.com","url":"https://https://www.bbraunusa.com/productsecurity"},{"source":"productsecurity@bbraun.com","url":"https://www.bbraun.com/productsecurity"}],"sourceIdentifier":"productsecurity@bbraun.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"productsecurity@bbraun.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-97358.json b/data/2026/CVE-2026-97358.json
index a7c7bd68bc..56f306d76e 100644
--- a/data/2026/CVE-2026-97358.json
+++ b/data/2026/CVE-2026-97358.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"SpaceCom","vendor":"B. Braun Melsungen AG","versions":[{"lessThanOrEqual":"U/L94","status":"affected","version":"0","versionType":"custom"}]}],"source":"productsecurity@bbraun.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An inclusion of web functionality from an untrusted source could allow remote code execution on SpaceCom"}],"id":"CVE-2026-97358","lastModified":"2026-11-13T18:17:50.140","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.0,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"productsecurity@bbraun.com","type":"Secondary"}]},"published":"2026-11-13T18:17:50.140","references":[{"source":"productsecurity@bbraun.com","url":"https://https://www.bbraunusa.com/productsecurity"},{"source":"productsecurity@bbraun.com","url":"https://www.bbraun.com/productsecurity"}],"sourceIdentifier":"productsecurity@bbraun.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-830"}],"source":"productsecurity@bbraun.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"SpaceCom","vendor":"B. Braun Melsungen AG","versions":[{"lessThanOrEqual":"U/L94","status":"affected","version":"0","versionType":"custom"}]}],"source":"productsecurity@bbraun.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An inclusion of web functionality from an untrusted source could allow remote code execution on SpaceCom"}],"id":"CVE-2026-97358","lastModified":"2026-11-13T20:19:08.280","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.0,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"productsecurity@bbraun.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-97358","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:31:26.488418Z","version":"2.0.3"}}]},"published":"2026-11-13T18:17:50.140","references":[{"source":"productsecurity@bbraun.com","url":"https://https://www.bbraunusa.com/productsecurity"},{"source":"productsecurity@bbraun.com","url":"https://www.bbraun.com/productsecurity"}],"sourceIdentifier":"productsecurity@bbraun.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-830"}],"source":"productsecurity@bbraun.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-97361.json b/data/2026/CVE-2026-97361.json
index 1a2a48c1a2..5d3d184bd0 100644
--- a/data/2026/CVE-2026-97361.json
+++ b/data/2026/CVE-2026-97361.json
@@ -1 +1 @@
-{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"SpaceCom","vendor":"B. Braun Melsungen AG","versions":[{"lessThanOrEqual":"U/L94","status":"affected","version":"0","versionType":"custom"}]}],"source":"productsecurity@bbraun.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"There exists an improper privilege management vulnerability that could cause privilege escalation at the SpaceCom and Space Battery pack SP with WiFi."}],"id":"CVE-2026-97361","lastModified":"2026-11-13T18:17:50.283","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.5,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"productsecurity@bbraun.com","type":"Secondary"}]},"published":"2026-11-13T18:17:50.283","references":[{"source":"productsecurity@bbraun.com","url":"https://www.bbraun.com/productsecurity"},{"source":"productsecurity@bbraun.com","url":"https://www.bbraunusa.com/productsecurity"}],"sourceIdentifier":"productsecurity@bbraun.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"productsecurity@bbraun.com","type":"Secondary"}]}
+{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"SpaceCom","vendor":"B. Braun Melsungen AG","versions":[{"lessThanOrEqual":"U/L94","status":"affected","version":"0","versionType":"custom"}]}],"source":"productsecurity@bbraun.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"There exists an improper privilege management vulnerability that could cause privilege escalation at the SpaceCom and Space Battery pack SP with WiFi."}],"id":"CVE-2026-97361","lastModified":"2026-11-13T20:19:09.273","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.5,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"productsecurity@bbraun.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-97361","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-13T18:29:56.225817Z","version":"2.0.3"}}]},"published":"2026-11-13T18:17:50.283","references":[{"source":"productsecurity@bbraun.com","url":"https://www.bbraun.com/productsecurity"},{"source":"productsecurity@bbraun.com","url":"https://www.bbraunusa.com/productsecurity"}],"sourceIdentifier":"productsecurity@bbraun.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"productsecurity@bbraun.com","type":"Secondary"}]}
diff --git a/data/2026/CVE-2026-97692.json b/data/2026/CVE-2026-97692.json
new file mode 100644
index 0000000000..bc3112357e
--- /dev/null
+++ b/data/2026/CVE-2026-97692.json
@@ -0,0 +1 @@
+{"affected":[{"affectedData":[{"product":"bacnet-stack","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.4.6"},{"status":"affected","version":">= 1.5.0, < 1.5.2"},{"status":"affected","version":">= 1.6.0, < 1.6.1"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, the BACnet/SC message decoder walks the header-option list by following each option's MORE bit. Nothing rejects a list whose last option still has the MORE bit set, and the decode walk has no upper bound on how many options it processes. A single crafted BVLC-SC frame makes the walk advance one option past the end of the message and read message[message_len], one byte out of bounds. When the bytes after the message carry more MORE-set option markers, the walk keeps going: it runs past the fixed 4-entry option array and writes decoded option fields out of bounds. On the server that decode array is the static global bsc_dm, so the out-of-bounds write lands in adjacent BSS. Both faults are reachable before authentication, from the first frame a peer sends on a BACnet/SC connection, and the bytes that follow the message are the same peer's prior-frame data. This issue has been patched in versions 1.4.6, 1.5.2, 1.6.1, and 1.7.0."}],"id":"CVE-2026-97692","lastModified":"2026-11-13T19:20:03.780","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.7,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.5,"source":"security-advisories@github.com","type":"Secondary"}]},"published":"2026-11-13T19:20:03.780","references":[{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/pull/1435"},{"source":"security-advisories@github.com","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-gr74-333w-7wg8"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"security-advisories@github.com","type":"Primary"}]}
diff --git a/state/sync.json b/state/sync.json
index df86f6c953..3813c3bb1e 100644
--- a/state/sync.json
+++ b/state/sync.json
@@ -1 +1 @@
-{"initial_complete":true,"last_run_counts":{"seen":5375,"skipped":39,"unchanged":4909,"written":427},"last_run_mode":"incremental","last_successful_end":"2026-11-13T18:42:53+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-13T18:48:11.655634+00:00"}
+{"initial_complete":true,"last_run_counts":{"seen":5470,"skipped":39,"unchanged":5146,"written":285},"last_run_mode":"incremental","last_successful_end":"2026-11-13T20:42:52+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-13T20:48:15.483332+00:00"}